[rennf93]

What is this project?

tornadoapi-guard is async security tooling for Tornado applications. I'm the author. Features:

• IP and country allow and deny lists, user-agent filtering and cloud-provider blocking
• Rate limiting with automatic IP bans, with state shared across processes through async Redis
• SQL injection, XSS and other attack pattern detection on incoming requests
• Per-handler rules

Why is it awesome?

• Native coroutines throughout, so the checks never block Tornado's IOLoop.
• It shares one detection engine with the FastAPI, Flask and Django adapters of the same project, so mixed Python stacks get identical rules and shared ban state.
• MIT licensed, latest release v2.0.0.

Project background: Guard Core's first library is fastapi-guard, public since August 2024 (first PyPI release, 0.1.0, on 2024-08-26). It has 825 GitHub stars, 65 releases and about 62,000 PyPI downloads in the last month (pypistats.org). The framework-agnostic engines and the adapters for other frameworks and languages came later and run the same detection rules, checked in CI against shared conformance fixtures.