Shibuya

What is Shibuya?

Shibuya is an open-source Web Application Firewall (WAF) built in Rust that provides real-time threat detection and prevention for web applications. Unlike traditional WAFs that rely on legacy regex-based signatures, Shibuya employs machine learning anomaly detection and kernel-level blocking through eBPF technology to identify and stop attacks at line-rate performance. The platform supports over 615 OWASP Core Rule Set rules and includes specialized protection for GraphQL APIs, addressing modern application security needs. It can detect and block common web exploits including SQL injection, cross-site scripting (XSS), and remote code execution attempts, with response times under 5 milliseconds. Shibuya is designed for development teams and security operations teams that need flexible, high-performance application protection without vendor lock-in. The open-source nature allows for customization and inspection of security logic. The platform supports WASM plugins, enabling users to extend functionality and tailor protections to their specific application requirements. As a Rust-based solution, Shibuya emphasizes performance and memory efficiency compared to traditional WAF implementations. It targets organizations seeking to move beyond signature-based detection toward intent-based threat analysis while maintaining the transparency and control that open-source software provides.