Skip to content
@zentinelproxy

Zentinel

Zentinel — a secure, high-performance reverse proxy with programmable security agents
README.md

Zentinel

A security-first reverse proxy built to guard the free web

Website · Docs · Source · Agent Registry

Zentinel is a high-performance reverse proxy written in Rust, built on Cloudflare Pingora. It uses a pluggable agent architecture — each security or middleware concern is an isolated, composable module that you can mix, match, and extend.

Core

Repo Description
zentinel The proxy core — routing, TLS, load balancing, agent pipeline
zentinel-modsec Pure Rust ModSecurity engine with OWASP CRS compatibility
zentinel-convert Convert nginx / HAProxy / Envoy / Traefik / Caddy configs to Zentinel

Security Agents

Agent What it does
auth JWT, API keys, OIDC, mTLS, SAML
waf OWASP CRS web application firewall
zentinelsec Pure Rust ModSecurity WAF (no C deps)
modsec ModSecurity via libmodsecurity bindings
denylist IP and pattern-based blocking
ratelimit Token bucket rate limiting
bot-management Bot detection and management
ip-reputation Threat intelligence and blocklist checks
ai-gateway LLM proxy — prompt injection, PII, jailbreak detection
graphql-security Query depth, complexity, and introspection control
grpc-inspector gRPC authz, rate limiting, metadata inspection
websocket-inspector WebSocket content filtering and schema validation
content-scanner Malware scanning with ClamAV
spiffe SPIFFE / SPIRE workload identity
policy Policy evaluation — Rego/OPA + Cedar
soap SOAP envelope validation and WS-Security
audit-logger Compliance logging with PII redaction
api-deprecation API lifecycle and deprecation management

Extensibility Agents

Agent What it does
lua Custom logic via Lua scripts
js Custom logic via JavaScript
wasm Run WebAssembly modules in the request pipeline
transform Request / response header and body transforms
mock-server Stub responses for testing
chaos Fault injection for resilience testing
mqtt-gateway MQTT protocol gateway

Agent SDKs

Build your own agents in your language of choice.

Language Repo
Rust zentinel-agent-rust-sdk
Python zentinel-agent-python-sdk
Go zentinel-agent-go-sdk
TypeScript zentinel-agent-typescript-sdk
Kotlin zentinel-agent-kotlin-sdk
Elixir zentinel-agent-elixir-sdk
Haskell zentinel-agent-haskell-sdk

Infrastructure

Repo Description
zentinel-helm Helm chart for Kubernetes
zentinel-hub Fleet management control plane (Go)
zentinel-control-plane Fleet management control plane (Elixir/Phoenix)
zentinel-bench Benchmarks vs Envoy, HAProxy, Nginx

Built with Rust and Pingora. Based in Switzerland.

Pinned Loading

  1. zentinel zentinel Public

    A security-first reverse proxy built to guard the free web.

    Rust 30 3

Repositories

Showing 10 of 42 repositories
  • zentinel Public

    A security-first reverse proxy built to guard the free web.

    zentinelproxy/zentinel’s past year of commit activity
    Rust 30 Apache-2.0 3 1 0 Updated Feb 19, 2026
  • zentinel-agent-chaos Public

    Chaos Engineering agent for Zentinel - controlled fault injection for resilience testing

    zentinelproxy/zentinel-agent-chaos’s past year of commit activity
    Rust 0 0 0 0 Updated Feb 19, 2026
  • zentinel-agent-mock-server Public

    Mock server agent for Zentinel - intercepts requests and returns configurable stub responses

    zentinelproxy/zentinel-agent-mock-server’s past year of commit activity
    Rust 0 0 0 0 Updated Feb 19, 2026
  • zentinel-agent-audit-logger Public

    Structured audit logging agent for Zentinel proxy - compliance-focused logging with PII redaction

    zentinelproxy/zentinel-agent-audit-logger’s past year of commit activity
    Rust 0 0 0 0 Updated Feb 19, 2026
  • zentinel-agent-transform Public

    Request and response transformation agent for Zentinel proxy

    zentinelproxy/zentinel-agent-transform’s past year of commit activity
    Rust 0 0 0 0 Updated Feb 19, 2026
  • zentinel-agent-mqtt-gateway Public
    zentinelproxy/zentinel-agent-mqtt-gateway’s past year of commit activity
    Rust 0 0 0 0 Updated Feb 19, 2026
  • zentinel-agent-websocket-inspector Public

    WebSocket inspection agent for Zentinel proxy - content filtering, schema validation, rate limiting

    zentinelproxy/zentinel-agent-websocket-inspector’s past year of commit activity
    Rust 0 Apache-2.0 0 0 0 Updated Feb 19, 2026
  • zentinel-agent-api-deprecation Public

    API deprecation management agent for Zentinel proxy

    zentinelproxy/zentinel-agent-api-deprecation’s past year of commit activity
    Rust 0 0 0 0 Updated Feb 19, 2026
  • zentinel-agent-soap Public

    SOAP security agent for Zentinel proxy - envelope validation, WS-Security, and operation control

    zentinelproxy/zentinel-agent-soap’s past year of commit activity
    Rust 0 0 0 0 Updated Feb 19, 2026
  • zentinel-agent-grpc-inspector Public

    gRPC security agent for Zentinel - authorization, rate limiting, metadata inspection

    zentinelproxy/zentinel-agent-grpc-inspector’s past year of commit activity
    Rust 0 0 0 0 Updated Feb 19, 2026
View all repositories

People

This organization has no public members. You must be a member to see who’s a part of this organization.