See everything. Correct what matters.
coreX stands at the digital threshold and watches both directions so your applications never have to. A complete control plane for WAF, security rules, risk scoring, rate limiting, caching, compression, and more — all from a modern web GUI.
Everything you need to manage the edges
One proxy. Multiple directions. Zero blind spots. A complete control plane, data plane, and web GUI — from listeners and backends to WAF, security rules, caching, and AI agent integration.
WAF
OWASP CRS rules, custom SecRules, conditional exceptions, per-rule rate limiting, version snapshots, and SIEM forwarding.
Learn more →Security Rules + Risk Scoring
Ordered first-match-wins rules with the coreX expression language. Risk scoring assigns 0-99 scores that rules can act on.
Learn more →Load Balancing
Harness the full power of HAProxy: HTTP/2, QUIC/HTTP3, TLS, multiple load balancing algorithms, health checks, sticky sessions, and FastCGI.
Learn more →API Security
GraphQL query analysis, JSON schema validation, JWT/API-key auth validation, and multi-dimensional behavioral profiling for API endpoints.
Learn more →MCP Gateway
Connect AI agents via the Model Context Protocol. Teams, policies, DLP, guardrails, skills, marketplace, and a managed Vector log pipeline.
Learn more →coreX MCP Server
Internal MCP server exposing the full coreX REST API as MCP tools. Auto-discovers all endpoints, supports curated resources and prompts, and self-registers with the MCP Gateway on enable.
Learn more →Observability
Real-time metrics dashboards for HAProxy, WAF, and cache. Managed Vector log pipeline with S3, Datadog, Splunk, and Elasticsearch sinks. Audit events and config snapshots.
Learn more →Page Protections
Content Security Policy management, security headers, script allowlisting, and CSP violation reporting to protect against client-side attacks.
Learn more →Terraform Provider
Manage coreX resources as infrastructure-as-code. 50+ resource types, 22 data sources, auto-apply on every mutation, and CI/CD-friendly static JWT auth.
Learn more →Control Plane
FastAPI backend with a full REST API. Every feature is configurable via the API or the web GUI. Config changes are validated, snapshotted, and applied atomically.
Data Plane
Production-grade edge proxy with SPOA WAF, Rust Lua modules for compression, response transforms, image conversion, and GeoIP. Generated config is validated before reload.
Web GUI
React + TypeScript frontend with TailwindCSS. Runtime theme switching, drag-and-drop rule ordering, visual expression builder, and real-time metrics dashboards.
See it in action
Threshold security for the edge. A modern interface for every layer of your proxy stack.
Dashboard — real-time stats, config preview, and apply
Security Rules — ordered first-match-wins with the coreX expression language
WAF — OWASP CRS, custom rules, exceptions, and SIEM forwarding
Metrics — HAProxy and WAF event dashboards with breakdowns
Ready to get started?
Deploy coreX Manager in minutes with Docker Compose, or explore the full feature set.