AI Bouncer

AI-powered HTTP attack detection for Rails. Detects SQLi, XSS, credential stuffing, and more using ML embeddings.

AI-powered HTTP request classification for Ruby on Rails. Detect SQL injection, XSS, SSRF, and 15 other attack types using ML embeddings.

What you get

• Fast: ~100ms inference time (memory mode)
• Lightweight: ~32MB total model size
• 18 attack types: SQLi, XSS, SSRF, XXE, SSTI, Log4Shell, and more
• Calibrated confidence: Platt scaling for meaningful probability scores
• IP/path allowlist/blocklist: Skip or block by IP (CIDR) or path (wildcards)
• Request caching: Thread-safe LRU cache with TTL
• Structured logging: JSON or text format, compatible with ELK/Datadog

Mounting it

# Gemfile
gem "ai_bouncer"

# config/routes.rb
mount AiBouncer::Engine, at: "/ai_bouncer"

Details

10 stars on GitHub · MIT licensed · maintained by khasinski. Source: https://github.com/khasinski/ai_bouncer