Apache or Nginx TLS reverse proxy, app runner, Docker management, SentinelAI integration, OWASP compliance, WAF, Zero Trust mTLS, secrets vault, compliance reporting, security scanner, plugin marketplace, cluster management — 21 sidebar views in a modern dark-themed GUI on Windows, plus a cross-platform CLI for Linux. Unzip and run.
A complete development and production web stack that runs from any folder. No installation, no registry changes, no admin required.
Apache 2.4 reverse proxy with TLS 1.2/1.3, SNI multi-domain support, Let's Encrypt automation via bundled win-acme, self-signed cert generation with bundled OpenSSL. Auto-detects cert paths and generates vhost configs.
Start, stop, and monitor backend apps with health checks, auto-restart on crash, and multi-stage sub-processes. Run Supabase + npm dev simultaneously. Auto-accept prompts for npx/npm commands. Per-app environment variables.
Full Docker container management with Compose up/down, image pull, container logs. Portable PostgreSQL with one-click auto-install and progress bar. Database console for direct SQL queries. Supabase health monitoring.
Connect to your SentinelAI dashboard for 25+ real-time security monitors, 3-stage ML threat detection (local ML → heuristics → AI), ransomware canary files, fleet management, and remote agent commands.
10 automated checks against the OWASP Top 10 2025. Security score 0–100 with pass/fail breakdown per category. Color-coded OWASP cards for A01 through A10. Export compliance reports as CSV or TXT.
12 built-in rules covering SQL injection, XSS, path traversal, command injection, SSRF, and more. 3 modes: Detect Only, Block & Log, Block Silent. Custom rule editor with regex patterns. Export as ModSecurity .conf. Real-time threat log dashboard.
Quick Scan (11 checks) and Full Scan (18 checks) covering TLS config, headers, directory permissions, secrets exposure, network ports, containers, database security, and more. Severity breakdown: Critical, High, Medium, Low. Async scanning with progress bar. Results persisted and exportable.
DPAPI-encrypted key-value store (Windows CurrentUser scope). 8 categories: General, Database, API Key, OAuth, SSL/TLS, Cloud, Service, Internal. Reveal with 5-second auto-hide. Copy with 30-second clipboard auto-clear. One-click rotation with 32-char cryptographic random. Export as .env file. Backward compatible with legacy format.
4 frameworks: SOC2 Type II (9 controls), GDPR (6 articles), PCI-DSS v4.0 (8 requirements), HIPAA (5 safeguards). "All Frameworks" mode runs all 28 checks at once. Each check evaluates real config and provides evidence. Compliance score with pass/fail/N/A. Export as CSV or formatted TXT.
mTLS (mutual TLS) toggle with CA certificate generation (RSA 4096-bit, 10yr) and server certificate generation (RSA 2048-bit, 2yr) with auto-SAN from configured domains. Certificate-based auth policies: CN, OU, Issuer, Fingerprint, SAN match. Network segmentation zones with CIDR, port, and direction rules. Trust score 0–100. Export Apache .conf with SSLVerifyClient and SSLRequire directives.
Real-time CPU, RAM, and disk metrics. Request tracing with service dependency graph. P50/P95/P99 latency percentiles. Performance profiling and bottleneck detection. Custom alert thresholds with email and Slack notifications.
Multi-user RBAC with admin, editor, and viewer roles. Audit logging for all config changes. Share complete stack configs via .psxt templates (v1.1 bundles SSL certs as base64). Slack webhook notifications. Import creates missing site directories automatically.
Rate limiting per-IP and per-route. Geo-blocking by country code. Automated config backups with rotation. Load balancing across multiple backends. SSL certificate expiry monitoring with alerts. Remote management REST API for headless operation.
REST API v2.0 with 17 endpoints for remote management. Plugin marketplace with 20 community plugins. Multi-server cluster management with config sync. VS Code extension, CLI tool, 19 service blueprints (Next.js, Django, Flask, Express, etc.).
Request/response rewriting with regex. HTTP caching layer with Redis support. API gateway with path-based versioning. Dark/light theme toggle. Auto-update system with SHA256 integrity verification and rollback. Classic UI mode via --classic flag.
One-click PostgreSQL auto-install with progress bar. Start/stop/restart from the GUI. Database list, create/drop databases, and a built-in SQL query runner. No Docker required — runs as a portable binary from the postgres/ folder.
Dedicated Certificates view for managing all SSL certs. Let's Encrypt automation via bundled win-acme (HTTP-01 validation). Self-signed cert generation via bundled OpenSSL. Auto-detect cert paths by domain name. Certificate expiry monitoring with alerts.
Browse and install from 20 community plugins: Auth Provider, Rate Limiter Pro, Geo Blocker, WAF Rules, Metrics Exporter, Log Aggregator, SSL Manager, Load Balancer, and 12 more. Install from marketplace or upload ZIP/DLL. Pro license required to install.
Multi-server node management from a single dashboard. Add remote ProxyStack instances, monitor health status, and push configuration to secondary nodes. Auto-refresh every 30 seconds. Enterprise license required.
Built-in license activation on the Dashboard. Community (free), Pro, and Enterprise tiers with runtime feature gating. Stripe integration for checkout. License API (FastAPI) for validation, deactivation, and admin management. 14-day Pro trial included.
Centralized log viewer for Apache access/error logs and per-site logs. Real-time log tailing. Application settings management with theme toggle, auto-start configuration, and environment profile switching. All from dedicated Logs and Settings views.
From download to production in under 5 minutes.
Download the portable ZIP (~138 MB). Extract to any folder. No installer needed.
Run ProxyStackGUI.exe. The modern dark-themed GUI opens with 21 sidebar views ready to use.
Configure domains, backends, and SSL certs from the Sites tab. Apache vhosts are auto-generated.
One click to start Apache. Your reverse proxy is live with TLS, security headers, and WAF protection.
Click any view to see what's inside. Every feature accessible from a modern dark-themed control panel.
Unzip and run. No installation, no registry changes, no admin required. Built-in auto-updater keeps you current.
Single-binary, self-contained, no runtime needed. Docker, security scanning, backups, SentinelAI, monitoring — everything the GUI has, from the terminal.
All builds also available via GitHub CI/CD with automated tests
Linux Quick Start → One-liner install instructions
Cross-platform endpoint security agent — monitors processes, network, files, auth logs, cron jobs, and SSH keys. Reports to the SentinelAI dashboard with ML-powered threat detection.
macOS and ARM64 agent builds coming soon · SentinelAI Dashboard →
Every release is scanned with 70+ antivirus engines. Transparency matters.
ProxyStack GUI runs on Windows with .NET 8. The CLI runs on Windows and Linux with zero dependencies.
Recent updates and improvements across all releases.
openssl.cnf in release ZIPs for packaged certificate workflows.cloud deploy via SSH, cloud status remote health check, cloud setup-script for Ubuntu EC2. Full cloud-init script for automated provisioning.serve Command: Lightweight API server on port 9090 for remote cluster nodes — enables GUI health checks, config sync, and promotion across cloud instances.curl | tar xz && sudo ./install.shhttp2 on; directive for Nginx 1.25.1+Release history. We recommend always using the latest version.
| Version | Date | Highlights | Full | Lite |
|---|---|---|---|---|
| v{{VERSION}} (latest) | Apr 15, 2026 | Certificate Packaging Fix — bundled OpenSSL config, fixed packaged cert generation, updater metadata refresh | Download | Download |
| v14.3.3 | Mar 12, 2026 | Update & Versioning Fixes — v14.3.3 links, app version sync, startup reliability improvements | Superseded by v14.3.6 | |
| v14.3.2 | Feb 22, 2026 | Stability & SSL Fixes — CertsView freeze fix, GameSense proxy, Sentinel agent improvements | Superseded by v14.3.6 | |
| v14.3.1 | Feb 15, 2026 | Phase 22.5: UX Polish & Safety — prune previews, search boxes, context menus, enhanced confirmations, bug fixes | Superseded by v14.3.6 | |
| v14.2.1 | Feb 12, 2026 | Token Rewards & Admin: referral system, token wallet, 30-day feature unlocks, admin roles, HTTP/2 fix | Superseded by v14.3.6 | |
| v14.1.0 | Feb 12, 2026 | Full Nginx support — rate limiting, caching, load balancing, HTTP/2, access control, Reload button | Superseded by v14.3.6 | |
| v14.0.0 | Feb 12, 2026 | Plugin Marketplace (20 plugins), REST API v2.0, Cluster Management, 21 views | Superseded by v14.3.6 | |
| v11.6.1 | Feb 11, 2026 | Monetization & Licensing — Stripe, License API, PostgreSQL view | Superseded by v14.3.6 | |
Get notified about new releases, security advisories, and tips.