Install

Choose a CheeseWAF package for Linux, Docker, Windows, or macOS.

Pick one install path. Do not mix an NSIS install with a hand-copied Linux tree on the same host unless you know which process owns the ports.

systemd unit, system user, /etc/cheesewaf.

Compose, read-only root, non-root UID 10001.

Single exe, zip, or NSIS. Local controller on loopback.

DMG app or tar.gz CLI.

Release files

Download Alpha pre-releases, or take the same files from Actions artifacts.

File	Platform
`cheesewaf-*-linux-amd64.tar.gz`	Linux x86_64
`cheesewaf-*-linux-arm64.tar.gz`	Linux ARM64
`cheesewaf-*-linux-loong64.tar.gz`	Linux LoongArch
`cheesewaf-*-darwin-amd64.tar.gz` / `.dmg`	macOS Intel
`cheesewaf-*-darwin-arm64.tar.gz` / `.dmg`	macOS Apple Silicon
`cheesewaf-*-windows-amd64.exe`	Windows x86_64 CLI
`cheesewaf-*-windows-arm64.exe`	Windows ARM64 CLI
`cheesewaf-*-windows-amd64.zip`	Windows x86_64 portable tree
`cheesewaf-*-windows-arm64.zip`	Windows ARM64 portable tree
`CheeseWAF--windows--setup.exe`	Windows NSIS installer

After install, continue with Quick start.

Install the CheeseWAF binary, create the system user, and enable the systemd unit.

Run CheeseWAF in Compose with a read-only root filesystem and a non-root user.

Single-file CLI, portable zip, or NSIS installer. The GUI controller listens on loopback only.

Install CheeseWAF from a DMG, or run the tar.gz CLI.