BunkerWeb
An open-source web application firewall that runs as a reverse proxy in front of your web services.
These buttons open the developer's own site, repository or store listing in a new tab. wares.gg does not host downloads.
About BunkerWeb
BunkerWeb is a reverse proxy with web application firewall features. It sits in front of websites, applications and APIs and blocks attacks before they reach them. It covers common threats such as those in the OWASP Top 10, blocks malicious bots and helps mitigate DDoS attacks.
Because it acts as the single entry point for your services, it also manages HTTPS certificates, incoming traffic and HTTP security policies in one place. It is fully configurable and suits administrators who self-host web services and want a hardened front end.
Strengths
- Combines reverse proxy and WAF in one component
- Protects against OWASP Top 10 attacks and malicious bots
- Manages HTTPS certificates and HTTP security policies centrally
- Open source code that third parties can audit
Limitations
- Requires running and maintaining your own server infrastructure
- Security rules need tuning to avoid blocking legitimate traffic
Details
- Pricing
- FreeOpen source and free to download and self-host.
- License
- Open source, license not stated
- Developer
- Bunkerity
- Platforms
- Self-hosted
- How it runs
- Self-hosted
- Account
- Not required
- Best suited for
- Self-hosters and administrators protecting websites and APIs behind a hardened reverse proxy
- Categories
- Network tools, Security tools
- Last verified
- Added
- Provenance
- Facts checked against the developer's own pages and store listings, 1 sources on file.
Alternatives to BunkerWeb
Compare allSoftware that can replace BunkerWeb for an important use case, and what changes if you switch.
SafeLine
A self-hosted web application firewall and reverse proxy that protects web apps from attacks.
SafeLine is a self-hosted WAF and reverse proxy deployed with Docker Compose and managed through a web interface, similar in scope to BunkerWeb.
Similar software
Related functionality, not necessarily a direct replacement.
CrowdSec
Detect suspicious behavior in server logs and web traffic.
Fail2ban
Log-watching daemon that bans addresses after repeated authentication failures.
cert-manager
A Kubernetes and OpenShift controller that issues and renews X.509 TLS certificates automatically.
