Maintain allow and deny lists, check IPs against known bad actor databases, expose a single lookup API. Security teams use this before every external request.
Unlimited entries, threat feed integration, API lookup, audit log. Self-hosted on your hardware, no usage caps, no phone-home, your data stays on disk forever.
One ~13MB binary. No Docker, no dependencies, no background daemons.