WAF Thorngate: A Tiny Go WAF That Guards Your Cloudflare Tunnel Thorngate is a zero-dependency Go reverse-proxy WAF behind a Cloudflare Tunnel that honeypots scanners into a persistent blacklist before they reach your apps.