OnionGuard

OnionGuard is an open-source, sovereign, self-hosted HTTP admission-control engine specifically designed to protect anonymous services such as Tor onion services. It enforces a strict zero-trust identity model without relying on IP addresses, operates with zero-JavaScript challenges compatible with Tor Browser's highest security settings, includes proof-of-patience wait rooms, cryptographic sessions, and distributed multi-tier rate limiting, all optimizing privacy and defense against DDoS and abusive actors.