We are in public beta, excited? Sign up

FlowGuard

Privacy-first traffic filtering. Block threats without sacrificing control.

 Sign in
 Sign up

Your Infrastructure, Your Control

Sophisticated Security Without the SaaS Lock-in

FlowGuard is a self-hosted reverse proxy that puts you in complete control. Your traffic never leaves your servers. The optional control panel manages configuration and logs. Processing and traffic happens on your infrastructure.

Self-Hosted Privacy
Your traffic stays on your servers. FlowGuard runs entirely on your infrastructure with no mandatory external dependencies. The control panel is there for configuration and log management.

Powerful Control Panel
While FlowGuard can be fully managed via configuration files, the optional control panel makes setup and management easier. Configure rules, view logs, and monitor performance from a user-friendly web interface. Manage rules and settings for many servers at once and gain insights in traffic flowing allowing you to create rules on-the-fly. All while gaining access to managed IP database updates and updated IP lists from various sources.

High-Performance Filtering
Built in Go for minimal overhead and maximum throughput. Transparent interception means no application changes required. High performance IP lists and rules optimized for low latency. Scales easily to handle large volumes of traffic.

Dynamic Rule Engine
Create filtering rules based on path, domain, IP, ASN, geolocation, user-agent, headers, and more. Combine conditions with logical operators (AND, OR, NOT) for precise traffic control. Rules reload instantly without service interruption.

Automatic Certificate Management
Transparently inspect HTTPS traffic with automatic certificate loading and caching. Drop-in compatibility with any certificates you have deployed. Certificates refresh automatically when rotated, support for NGINX and file system.

IP Intelligence Integration
Supports IP database lookups for geolocation and ASN lookups. Automatically refreshes databases without downtime. Make security decisions based on visitor country, network, or managing organization.

Advanced IP Blocking
Built-in high-performance IP lists with automatic refresh without downtime. Support for both IPv4 and IPv6 and CIDR's in unified lists. Also supports Linux ipset lookups for kernel-level IP lists you already have.

Rate Limiting
Protect your services from abuse with flexible rate limiting rules. Define thresholds per IP, path, or any custom criteria. Keep legitimate users flowing while stopping or slowing automated attacks or bots.

Structured Logging
Send logs to multiple destinations simultaneously. Each log includes request details, client information, rule matches, and response data. Automatically configured by the control plane with log viewer.

Hot Configuration Reload
Update rules, logging sinks, IP lists, and more without restarting the service. FlowGuard detects configuration changes and applies them instantly. Zero disruption to active connections.

Transparent Proxy Mode
Automatically intercept traffic on ports 80 and 443 using iptables redirection. Graceful shutdown removes all iptables rules to restore normal traffic flow, no special and brittle setup.

Open Source
FlowGuard proxy is open source and built for transparency. Review the code, contribute improvements, or customize it for your specific needs. No black boxes, no vendor lock-in.

Simple Deployment
Install via APT/YUM on most Linux distro's or build directly from the source. The optional control panel provides a setup command that configures everything automatically. Comprehensive JSON schema for IDE autocomplete and validation.


Not the features you are looking for? Let us know what you need!

Pricing Plans and pricing.

Yearly billing gives you 2 months free!

Personal plan

  • 10 servers
  • ~50M request logs
  • 30-day log retention

Core plan

  • 25 servers
  • ~200M request logs
  • 30-day log retention

Fleet plan

  • 100 servers
  • ~500M request logs
  • 30-day log retention

Scale plan

  • 250 servers
  • ~1B request logs
  • 30-day log retention

Your purchase may be subject to sales tax and will automatically renew every month or year, depending on the billing period you’ve chosen, until cancelled.

Batteries included

Protection features come with every plan, including the free plan. Plans differ by number of servers, log retention, and hosted log volume.

What's included

  • Self-hosted proxy agents keep traffic on your servers

  • Unlimited rules, actions & IP lists

  • Advanced matching on headers, paths, IPs, countries, ASNs, user agents and more

  • Managed IP reputation feeds, including AbuseIPDB-powered blocking

  • Live request stream with searchable request logs

  • Block, allow, log, or rate limit suspicious requests

  • Server health checks, offline alerts & weekly traffic reports

  • Collaborate with unlimited team members





Need help?

We are happy to help you with any questions you might have.

  Documentation   Roadmap   Report a bug   Get in touch