PF Sense

pfsense.org
PF Sense

Widely used, open source firewall/router.

Open Source

PF Sense Privacy Policy

Privacy Policy Summary

  • The service is provided 'as is' and to be used at your sole risk
  • Instead of asking directly, this Service will assume your consent merely from your usage.

Score

D

Documents

About the Data

This data is kindly provided by tosdr.org. Read full report at: #6291

PF Sense Source Code

Author

pfsense

Description

Main repository for pfSense

#firewall#freebsd#pfsense

Homepage

http://www.pfsense.org

License

Apache-2.0

Created

12 May 11

Last Updated

16 Jun 26

Latest version

v2.5.2

Primary Language

PHP

Size

408,974 KB

Stars

5,672

Forks

1,595

Watchers

5,672

Language Usage

Language Usage

Star History

Star History

Top Contributors

Recent Commits

  • jim-p (31 Mar 26)

    Encode RSS widget post titles. Fixes #16770

  • Marcos Mendoza (30 Mar 26)

    Constrain regex for ifconfig parsing. Fix #16769 This avoids matching e.g. "ssid" on a line that contains "-hidessid".

  • R. Christian McDonald (30 Mar 26)

    pkg-utils.inc: chase pkg json output changes. Fixes #16768

  • jim-p (27 Mar 26)

    Safety belt encoding Add and enhance encoding on a few pages of interest. There is currently no known viable way to leverage these, but it's better to be safe.

  • jim-p (27 Mar 26)

    Encode hostnames in ARP table. Fixes #16763 While here, add and enhance encoding of other parameters for safety.

  • Marcos Mendoza (25 Mar 26)

    Improve pfanchordrill output readability Adds a new line to the end of pfanchordrill output.

  • Brad Davis (25 Mar 26)

    Remove lsof temporarily until it is updated after upstream changes https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=294023

  • Brad Davis (25 Mar 26)

    Bump the default version of go to 1.25 1.24 is EoL and the new default version is 1.25.

  • Marcos Mendoza (25 Mar 26)

    Merge pull request #4734 from filnko/fix-all-inkl-dyndns

  • jim-p (23 Mar 26)

    Alias table comment cleanup. Comments are already cleaned up before being written to the table file, but it's still best to ensure they're encoded before display.

  • Luiz Souza (20 Mar 26)

    Make sure the 'Accept' button is displayed with the message.

  • R. Christian McDonald (17 Mar 26)

    util.inc: define `POSIX_EPERM`

  • R. Christian McDonald (17 Mar 26)

    follow up to 1eba5d92, replace rogue space indents with tabs

  • R. Christian McDonald (17 Mar 26)

    util.inc: refactor `isvalidpid` to use posix_kill instead of exec

  • Marcos Mendoza (16 Mar 26)

    Remove user survey prompts. Implement #16747

  • Marcos Mendoza (13 Mar 26)

    Migrate previous config encoding on upgrade

  • jim-p (11 Mar 26)

    Validate DHCPv6 Delegation Parameters. Fixes #16744

  • Jim Pingle (12 Mar 26)

    Validate PID file before use. Fixes #16743 Also ensure Captive Portal zone and OpenVPN service ID are valid before stopping services

  • Jim Pingle (12 Mar 26)

    Respect cert checkbox when creating a user. Fixes #16721 Also fixes a case where the form was not displaying properly when there were input errors. This likely needs more testing to confirm each action case is being handled properly with and without input errors in the submission.

  • Christoph Filnkößl (07 Mar 26)

    DDNS: Update All-Inkl response handling. Fixes #16218

  • Marcos Mendoza (06 Mar 26)

    Increase log level of mwexec() errors Errors from this were previously set to informational because callers of mwexec() should already check for the return value of the command being run so any errors are properly handled and any necessary logs provide proper context. However it's more appropriate to set it to at least notice for added awareness of potential errors.

  • Brad Davis (06 Mar 26)

    Clean up and modernize

  • Brad Davis (06 Mar 26)

    Clean up and modernize

  • Brad Davis (06 Mar 26)

    Simplify and eliminate some extra extra forking

  • Marcos Mendoza (05 Mar 26)

    RSS widget: Update deprecated code. Fix #16733 Refactor the code to replace the use of deprecated methods: set_cache_location(), set_feed_url()

  • Marcos Mendoza (05 Mar 26)

    Fix function comment typo

  • Marcos Mendoza (04 Mar 26)

    Add ntoe about default log level for verbose options Verbose options can log additional information that may only be shown with the respective log level.

  • R. Christian McDonald (02 Mar 26)

    Invalidate password hash cache after changing password. Fixes #16728

  • Marcos Mendoza (02 Mar 26)

    Merge pull request #4748 from k-ross/godaddy-v6

  • Charlie Root (02 Mar 26)

    Use IPv4 when updating GoDaddy IPv6 dynamic DNS entries. Fixes #16731

PF Sense Security

3.5/10

Repo Security Summary

Updated 25 May 26

  • Packaging N/A
  • Maintained 10/10
  • Code-Review 0/10
  • Token-Permissions N/A
  • Dangerous-Workflow N/A
  • CII-Best-Practices 0/10
  • Binary-Artifacts 10/10
  • Security-Policy 0/10
  • License 10/10
  • Fuzzing 0/10
  • Pinned-Dependencies N/A
  • Signed-Releases N/A
  • Branch-Protection 0/10
  • SAST 0/10

PF Sense Website

Website

pfSense® - World's Most Trusted Open Source Firewall

pfSense is a free and open source firewall and router that also features unified threat management, load balancing, multi WAN, and more

Redirects

Does not redirect

Security Checks

All 65 security checks passed

Server Details

  • IP Address 208.123.73.78
  • Hostname acb.netgate.com
  • Location Austin, Texas, United States of America, NA
  • ISP zColo
  • ASN AS27325

Associated Countries

  • US US

Safety Score

Website marked as safe

100%

Blacklist Check

www.pfsense.org was found on 0 blacklists

  • AntiSocial Blacklist
  • Artists Against 419
  • Badbitcoin
  • Bambenek Consulting
  • CERT Polska
  • CoinBlockerLists
  • CRDF
  • CryptoScamDB
  • EtherAddressLookup
  • EtherScamDB
  • Fake Website Buster
  • MetaMask EthPhishing
  • NABP Not Recommended Sites
  • OpenPhish
  • PetScams
  • PhishFeed
  • PhishFort
  • Phishing.Database
  • PhishStats
  • PhishTank
  • Phishunt
  • RPiList Not Serious
  • Scam.Directory
  • SecureReload Phishing List
  • Spam404
  • StopGunScams
  • Suspicious Hosting IP
  • ThreatFox
  • ThreatLog
  • TweetFeed
  • URLhaus
  • ViriBack C2 Tracker

Website Preview

Website preview

PF Sense Reviews

More Self-Hosted Network Security

About the Data: PF Sense

API

You can access PF Sense's data programmatically via our API. Simply make a GET request to:

https://api.awesome-privacy.xyz/v1/services/pf-sense

The REST API is free, no-auth and CORS-enabled. To learn more, view the API Docs or read the API Usage Guide.

Share PF Sense

Help your friends compare Self-Hosted Network Security, and pick privacy-respecting software and services.
Share PF Sense and Awesome Privacy with your network!

View Self-Hosted Network Security (8)