Application Firewall

There are amny application firewalls, the current default is Apache APISIX

Alternative Application Firewall

Open Source Web Application Firewalls but some of these have paid versions with more featues.

SafeLine

Bunkerweb

opemappsec

uusec