SysWarden

Linux defense. Your host. Your rules.

Host-local Linux defense with auditable, fail-closed enforcement.

Website | Documentation | Build from source | Roadmap

SysWarden is an open-source Linux security orchestrator that combines an authoritative nftables policy, host telemetry, threat-intelligence lists, out-of-band WAAP log analysis, authenticated high availability and a native terminal dashboard. It is designed for operators who want one reviewable host defense layer without placing another proxy in the application data path.

SysWarden is not an inline HTTP proxy, a traffic sanitizer or a regulatory certification product.

Current source version: v4.10.4.

The latest stable release is v4.10.4, validated under IVV (Integration, Verification and Validation).

Use the installation guide, historical recovery and removal guide and [release…