Documentation
How AIWAF works: system architecture
Understand the architecture
Follow a request through adapters, route policies, deterministic checks, state, and response observations. Then see how logs feed the next model.
Read the system overviewPython internals | Node.js internals | Java internals | Rust/WASM internals
Current package matrix
Each package is versioned and released independently.
| Runtime | Package | Repository version | Primary use |
|---|---|---|---|
| Python | aiwaf | 1.0.8 | Django, Flask, and FastAPI protection |
| Node.js | aiwaf | 1.0.2 | Express and Node framework middleware |
| Rust/Python | aiwaf-rust | 0.2.1 | Native Python acceleration and JSON model inference |
| WebAssembly | aiwaf-wasm | 0.2.1 | Rust detection and model primitives for JavaScript |
| Java | io.github.aiwaf-project:aiwaf-java | 1.3.0 | Spring MVC and Jakarta Servlet protection |
Supported framework integrations include Django, Flask, FastAPI, Express, Fastify, Hapi, Koa, NestJS, Next.js API routes, AdonisJS, Sails.js, Spring MVC, and Jakarta Servlet.
Python
Reference for AIWAF architecture, storage, middleware, training lifecycle, CLI surface, tests, and release pipeline for Python.
Open Python Deep-Dive DocsJavaScript
Reference for AIWAF Node.js middleware architecture, framework integrations, end-to-end setup guide, storage/training lifecycle, CLI operations, and packaging.
Open JavaScript Deep-Dive DocsPHP (Legacy Reference)
Historical PHP integration pages. PHP is absent from the current monorepo and is not part of its current package or release matrix.
Open Legacy PHP ReferenceJava
Reference and setup guide for AIWAF-Java with framework-agnostic engine usage, Spring/Servlet integrations, runtime storage backends, and CLI/admin operations.
Open Java Deep-Dive DocsRust Accelerator
Deep-dive docs for aiwaf-rust covering PyO3 bindings, WASM exports, Isolation Forest semantics, integration patterns, and build/test workflows.