See everything. Correct what matters.
coreX stands at the digital threshold and watches both directions so your applications never have to. A complete control plane for WAF, security rules, risk scoring, rate limiting, caching, compression, and more — all from a modern web GUI.
Everything you need to manage the edges
One proxy. Multiple directions. Zero blind spots. A complete control plane, data plane, and web GUI — from listeners and backends to WAF, security rules, caching, and AI agent integration.
WAF
OWASP CRS rules, custom SecRules, exceptions, per-rule version snapshots, SIEM forwarding, and CRS auto-updates.
Learn more →Security Rules + Risk Scoring
Ordered first-match-wins rules with the coreX expression language. Risk scoring assigns 0-99 scores that rules can act on.
Learn more →Load Balancing
Harness the full power of HAProxy: HTTP/2, QUIC/HTTP3, TLS, multiple load balancing algorithms, health checks, and sticky sessions.
Learn more →API Security
GraphQL query analysis, JSON schema validation, JWT/API-key auth validation, and multi-dimensional behavioral profiling for API endpoints.
Learn more →Observability
Real-time metrics dashboards, JSON access logs with risk scores and WAF actions, audit event tracking, and config snapshot/revert.
Learn more →Page Protections
Content Security Policy management, security headers, script allowlisting, and CSP violation reporting to protect against client-side attacks.
Learn more →Control Plane
FastAPI backend with a full REST API. Every feature is configurable via the API or the web GUI. Config changes are validated, snapshotted, and applied atomically.
Data Plane
Production-grade edge proxy with SPOA WAF, Rust Lua modules for compression, response transforms, image conversion, and GeoIP. Generated config is validated before reload.
Web GUI
React + TypeScript frontend with TailwindCSS. Runtime theme switching, drag-and-drop rule ordering, visual expression builder, and real-time metrics dashboards.
See it in action
Threshold security for the edge. A modern interface for every layer of your proxy stack.
Dashboard — real-time stats, config preview, and apply
Security Rules — ordered first-match-wins with the coreX expression language
WAF — OWASP CRS, custom rules, exceptions, and SIEM forwarding
Metrics — HAProxy and WAF event dashboards with breakdowns
Ready to get started?
Deploy coreX Manager in minutes with Docker Compose, or explore the full feature set.