open-appsec

open-appsec combines learning-based request inspection with API discovery, OpenAPI validation and rate limits. Rate-limit inputs can use an IP address or keys in JWTs, cookies or headers. Its File Security documentation describes an optional engine that analyzes HTTP uploads and consults Check Point ThreatCloud for reputation. That engine is inactive by default and is scoped to Check PointWAF or the deprecated open-appsec Premium subscription. Its settings distinguish Detect, Prevent and Disable and define handling for file size, nested archives and extraction failures. Confirm the cloud disclosure terms before enabling it for confidential uploads.