ContractShield

ContractShield is a Web Application Firewall (WAF) designed to protect web applications and APIs in real-time. It defends against OWASP Top 10 attacks including SQL injection, cross-site scripting (XSS), command injection, prototype pollution, SSRF (Server-Side Request Forgery), and path traversal attempts.

ContractShield provides endpoint-specific validation rules, configurable rate limiting, and request body inspection. It supports both monitor and block modes, allowing teams to observe threats before enforcing rules. Available as an npm package for Node.js/Express and a Python SDK for FastAPI/Django, it integrates directly into existing application code with minimal configuration through a simple YAML policy file.

Built in Switzerland, ContractShield is designed for SMBs and mid-market companies looking for enterprise-grade API protection without the complexity of traditional WAF solutions.