# KeiWall — a web-application firewall

Canonical page: https://keilab.io/security/keiwall/

security · keiwall

The lab's own web-application firewall: a Go reverse proxy with high-precision signature rules plus very small machine-learning models, designed to check every request inline without becoming the bottleneck.

## What it does

KeiWall sits in front of web applications as a reverse proxy and inspects every request. High-precision signature rules catch known attack shapes, and a few very small, purpose-built models add a learned check, small enough to run inline on every request without becoming the bottleneck. Engineering detail is shared under NDA.

## Why small models, not one big one

A WAF sits on the hot path of every request. A multi-megabyte classifier is a latency and memory tax on every request; very small models leave room to run the learned check inline.

## Versions

The firewall is written in Go; a MAX-native version is in development.

cross-references

- [→ MAX-OS on silicon](https://keilab.io/hardware/max-os-silicon/)
- [→ MAX (the language)](https://keilab.io/ai/max/)
- [⊘ Security overview](https://keilab.io/security/)

Status: In development

Model class: small int8 models

Sensitivity: concept public · methods NDA

[⊸ Security inquiry](https://keilab.io/contact/)

---
KeiLab is operated by KeiSei LLC, a Wyoming limited liability company. +1 307 210 8538
Site index for AI agents: https://keilab.io/llms.txt