Skip to content
@zentinelproxy

Zentinel

Zentinel — a secure, high-performance reverse proxy with programmable security agents
README.md

Zentinel

A security-first reverse proxy built to guard the free web

Website · Docs · Source · Agent Registry

Zentinel is a high-performance reverse proxy written in Rust, built on Cloudflare Pingora. It uses a pluggable agent architecture — each security or middleware concern is an isolated, composable module that you can mix, match, and extend.

Core

Repo Description
zentinel The proxy core — routing, TLS, load balancing, agent pipeline
zentinel-modsec Pure Rust ModSecurity engine with OWASP CRS compatibility
zentinel-convert Convert nginx / HAProxy / Envoy / Traefik / Caddy configs to Zentinel

Security Agents

Agent What it does
auth JWT, API keys, OIDC, mTLS, SAML
waf OWASP CRS web application firewall
zentinelsec Pure Rust ModSecurity WAF (no C deps)
modsec ModSecurity via libmodsecurity bindings
denylist IP and pattern-based blocking
ratelimit Token bucket rate limiting
bot-management Bot detection and management
ip-reputation Threat intelligence and blocklist checks
ai-gateway LLM proxy — prompt injection, PII, jailbreak detection
graphql-security Query depth, complexity, and introspection control
grpc-inspector gRPC authz, rate limiting, metadata inspection
websocket-inspector WebSocket content filtering and schema validation
content-scanner Malware scanning with ClamAV
spiffe SPIFFE / SPIRE workload identity
policy Policy evaluation — Rego/OPA + Cedar
soap SOAP envelope validation and WS-Security
audit-logger Compliance logging with PII redaction
api-deprecation API lifecycle and deprecation management

Extensibility Agents

Agent What it does
lua Custom logic via Lua scripts
js Custom logic via JavaScript
wasm Run WebAssembly modules in the request pipeline
transform Request / response header and body transforms
image-optimization On-the-fly JPEG/PNG to WebP/AVIF conversion with caching
mock-server Stub responses for testing
chaos Fault injection for resilience testing
mqtt-gateway MQTT protocol gateway

Agent SDKs

Build your own agents in your language of choice.

Language Repo
Rust zentinel-agent-rust-sdk
Python zentinel-agent-python-sdk
Go zentinel-agent-go-sdk
TypeScript zentinel-agent-typescript-sdk
Kotlin zentinel-agent-kotlin-sdk
Elixir zentinel-agent-elixir-sdk
Haskell zentinel-agent-haskell-sdk

Infrastructure

Repo Description
zentinel-helm Helm chart for Kubernetes
zentinel-hub Fleet management control plane (Go)
zentinel-control-plane Fleet management control plane (Elixir/Phoenix)
zentinel-bench Benchmarks vs Envoy, HAProxy, Nginx

Built with Rust and Pingora. Based in Switzerland.

Pinned Loading

  1. zentinel zentinel Public

    A security-first reverse proxy built to guard the free web.

    Rust 32 4

Repositories

Showing 10 of 45 repositories
  • zentinel-agent-image-optimization Public

    Image optimization agent for Zentinel proxy - on-the-fly WebP/AVIF conversion with caching

    zentinelproxy/zentinel-agent-image-optimization’s past year of commit activity
    Rust 1 0 0 0 Updated Feb 27, 2026
  • registry.zentinelproxy.io Public

    Agent registry for the Zentinel reverse proxy — registry.zentinelproxy.io

    zentinelproxy/registry.zentinelproxy.io’s past year of commit activity
    HTML 0 0 0 0 Updated Feb 27, 2026
  • zentinelproxy.io-docs Public

    Versioned documentation for Zentinel reverse proxy

    zentinelproxy/zentinelproxy.io-docs’s past year of commit activity
    CSS 0 0 0 0 Updated Feb 27, 2026
  • zentinel Public

    A security-first reverse proxy built to guard the free web.

    zentinelproxy/zentinel’s past year of commit activity
    Rust 32 Apache-2.0 4 1 0 Updated Feb 27, 2026
  • zentinel-agent-modsec Public

    ModSecurity WAF agent for Zentinel reverse proxy - full OWASP CRS support via libmodsecurity

    zentinelproxy/zentinel-agent-modsec’s past year of commit activity
    Rust 0 Apache-2.0 0 0 0 Updated Feb 27, 2026
  • zentinel-agent-audit-logger Public

    Structured audit logging agent for Zentinel proxy - compliance-focused logging with PII redaction

    zentinelproxy/zentinel-agent-audit-logger’s past year of commit activity
    Rust 0 0 0 0 Updated Feb 27, 2026
  • zentinel-agent-spiffe Public

    SPIFFE/SPIRE workload identity agent for Zentinel reverse proxy

    zentinelproxy/zentinel-agent-spiffe’s past year of commit activity
    Rust 0 0 0 0 Updated Feb 27, 2026
  • zentinel-agent-waf Public

    WAF agent for Zentinel reverse proxy - OWASP CRS compatible web application firewall

    zentinelproxy/zentinel-agent-waf’s past year of commit activity
    Rust 1 Apache-2.0 0 0 0 Updated Feb 27, 2026
  • zentinel-agent-rust-sdk Public

    High-level SDK for building Zentinel proxy agents

    zentinelproxy/zentinel-agent-rust-sdk’s past year of commit activity
    Rust 0 Apache-2.0 0 0 0 Updated Feb 27, 2026
  • zentinel-agent-auth Public

    Authentication agent for Zentinel reverse proxy - JWT, API keys, and OIDC

    zentinelproxy/zentinel-agent-auth’s past year of commit activity
    Rust 1 Apache-2.0 0 0 0 Updated Feb 27, 2026
View all repositories

People

This organization has no public members. You must be a member to see who’s a part of this organization.

Top languages

Loading…

Most used topics

Loading…