Add Spring Boot Guard to Security

RE
7d ago
+1-0

Suggestion type

  • Project
  • Resource

Checklist

  • I searched the list and existing issues for duplicates.
  • I changed README_SOURCE.md, not the generated README.md.
  • This pull request contains one suggestion.
  • The suggestion is relevant to Java or the JVM and fits its chosen category.
  • I used the canonical project or resource link.
  • The suggestion is current and maintained.
  • The concise, neutral description explains its distinguishing value and ends with punctuation.
  • Licensing is clear and any restrictive terms are disclosed where applicable.

I'm the author. Spring Boot Guard is a Spring Boot 3 starter (com.guard-core:spring-boot-guard on Maven Central, latest 1.1.0) that adds request-level protection through auto-configuration: IP and country allow and deny lists, rate limiting with automatic IP bans, SQL injection and XSS pattern detection and security headers. Unlike Spring Security, which handles authentication and authorization, it filters hostile traffic before it reaches your controllers.

Summary by cubic

Adds Spring Boot Guard to the Security libraries section of the curated Java list.

  • The starter filters hostile traffic with IP allow/deny lists, rate limiting plus automatic bans, injection and XSS detection, and security headers, complementing Spring Security's auth and authorization focus.

Project background: Guard Core's first library is fastapi-guard, public since August 2024 (first PyPI release, 0.1.0, on 2024-08-26). It has 825 GitHub stars, 65 releases and about 62,000 PyPI downloads in the last month (pypistats.org). The framework-agnostic engines and the adapters for other frameworks and languages came later and run the same detection rules, checked in CI against shared conformance fixtures.