BunkerWeb
BunkerWeb gives you web Application Firewall (WAF) that will protect your web services on your own infrastructure.
Overview
🛡️ Open-source and next-generation Web Application Firewall (WAF) Fool attackers and protect your web services with BunkerWeb, the open-source and next-gen Web Application Firewall (WAF). 🌐 Website | 🤝 Panel | 📓 Documentation | 👨💻 Demo | 📱 Demo UI | 🧩 Templates | 🛡️ Examples
💬 Chat | 📝 Forum | 📝 Community | 🗺️ Threatmap | 📊 Status | 🔎 Feedback The project has 10K+ GitHub stars and is licensed under AGPL-3.0.
Key Features
Source: GitHub README
- HTTPS support with transparent Let’s Encrypt automation
- State-of-the-art web security: HTTP security headers, prevent leaks, TLS hardening, …
- Integrated ModSecurity WAF with the OWASP Core Rule Set
- Automatic ban of strange behaviors based on HTTP status codes
- Apply connection and request limits for clients
- Block bots by asking them to solve a challenge (e.g., cookie, JavaScript, captcha, hCaptcha, or reCAPTCHA)
- Block known bad IPs with external blacklists and DNSBL
- And much more…
Getting Started
Source: GitHub README
BunkerWeb Cloud is the easiest way to get started with BunkerWeb. It offers you a fully managed BunkerWeb service with no hassle. Think of it like a BunkerWeb-as-a-Service!
You will find more information about BunkerWeb Cloud beta here and you can apply for free in the BunkerWeb panel. —>
Normalized Features
Source: tool-features-normalized.json
docker, helm, kubernetes, mysql, plugins, postgresql, sqlite, webhooks.
Deploy
Features
Integrations & APIs
- Plugin / Extension System
- Webhooks
Related Security & Authentication Tools
View all 159 →
Ghidra
66KA free, open-source software reverse engineering framework created by the NSA — disassemble, decompile, and analyze compiled code on any platform.
PocketBase
58KOpen-source backend in a single 12 MB binary — realtime database, auth, file storage, and admin dashboard. No Docker, no Postgres, just run it.
Vaultwarden
57KLightweight, self-hosted Bitwarden-compatible password manager written in Rust. Uses 10x less RAM than the official server and works with all Bitwarden clients.
Zen Browser
41KZen Browser is a privacy-focused, beautifully designed Firefox fork with a unique sidebar tab layout, split views, and built-in content blocking — no telemetry, no tracking.
Vault
35KManage secrets and protect sensitive data. Securely store and control access to tokens, passwords, certificates, and encryption keys.
KeyCloak
33KOpen source identity and access management. Add authentication to applications and secure services with minimum effort.