About OWASP Netryx
Welcome to Netryx (pronounced ‘netriks’), advanced java security framework lead by exploit.org group.
It was created to help developers make their web applications more secure and effective against various threats.
It is modular security framework that is designed to integrate to as many applications, as possible:
Secure By Default
Reactive security pipeline based for Netty based servers, that uses Armor as a backbone.
Secure By Default
Advanced Web Application Firewall for Netty based servers, that uses Armor Pipeline’s backend.
Lightweight Machine Learning library for learning and running models in an intensive environment. Utilized in Netryx WAF for mitigating threats.
Implements following algorithms:
Netryx Memory manages sensitive data securely in memory using Java native interface for UNIX systems.
Zero dependency event manager designed for building even-based applications. Used by Netryx WAF for Security Events management.
Find articles here: OWASP Path To Secure Software series
For security concerns or to discuss potential features that you’d prefer not to disclose publicly, please reach out to us at: [email protected].
For general inquiries or to engage in discussions on various topics, join our Telegram channel and chat at: @exploitorg.
Now - End of Year 1
Q1: Improve documentation and create training materials for developers on the main features of Netryx.
Q2: Adaptation of User-Side and Pipeline-Side functionality to meet user requirements and potentially new threats.
Q3-Q4: Extending Netryx support for additional Java frameworks, collecting feedback for further improvements.
Year 2
Q1: Designing AI driven WAF system following privacy and security requirements of processed data. Define possibilities of turning it into decentralized (p2p) view.
Q2-Q3: Development and testing of WAF system, collecting feedback from relevant stakeholders
Q4: First autonomous WAF system release
Year 3
Q1-Q2: Exploration of how Netryx can be adapted for other programming languages, such as Python, C#, JavaScript and Rust.
Q3-Q4: Develop Netryx prototypes for selected languages, begin testing with community participation.
Year 4
Q1-Q2: Launching versions of Netryx for new programming languages, organizing events to train developers.
Q3-Q4: Develop partnerships with academic and research organizations, strengthening interaction with the community to jointly develop new features and improvements.
Basic assumptions and conditions:
Project Leaders
ized READ/WRITE/EXEC
Project Information
Incubator Project
Classification
Other
Language
Java
License
BSD 2-Clause Simplified License
Contributors
6
GitHub Stars
22
Downloads
0
Corporate Supporters
OWASP is a nonprofit foundation improving software security through open-source projects, global communities, and education. All resources are free and open to everyone.
Quick Links
Legal & Governance
SlackOWASP, the OWASP logo, and Global AppSec are registered trademarks and AppSec Days, AppSec California, AppSec Cali, SnowFROC, OWASP Boston Application Security Conference, and LASCON are trademarks of the OWASP Foundation, Inc.
© 2026, OWASP Foundation Inc. All rights reserved.