ContractShield icon
ContractShield icon

ContractShield

Intelligent Web Application Firewall that protects APIs in real-time against OWASP Top 10 attacks, injection attempts, and SSRF.

ContractShield screenshot 1

Cost / License

Application type

Platforms

  • Self-Hosted
Alternatives  
0likes
2alternatives
0articles

Features

Properties

  1.  Lightweight

Features

  1.  No Tracking
  2.  SQL Injection Protection
  3.  Web Application Firewall

 Tags

ContractShield News & Activities

Highlights All activities

Recent activities

ContractShield information

AlternativeTo Categories

Network & Admin, Security & Privacy

GitHub repository

  •  0 Stars
  •  0 Forks
  •  21 Open Issues
  •   Updated  
View on GitHub

Popular alternatives

View all
ContractShield was added to AlternativeTo by ContractShield on and this page was last updated .
No comments or reviews, maybe you want to be first?

Official Links

AppStores & Other Links

What is ContractShield?

ContractShield is a Web Application Firewall (WAF) designed to protect web applications and APIs in real-time. It defends against OWASP Top 10 attacks including SQL injection, cross-site scripting (XSS), command injection, prototype pollution, SSRF (Server-Side Request Forgery), and path traversal attempts.

ContractShield provides endpoint-specific validation rules, configurable rate limiting, and request body inspection. It supports both monitor and block modes, allowing teams to observe threats before enforcing rules. Available as an npm package for Node.js/Express and a Python SDK for FastAPI/Django, it integrates directly into existing application code with minimal configuration through a simple YAML policy file.

Built in Switzerland, ContractShield is designed for SMBs and mid-market companies looking for enterprise-grade API protection without the complexity of traditional WAF solutions.