bunkerity/bunkerweb

Health v2 · maintenance only

Adoption not part of the score

10865 stars · 640 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

BunkerWeb is an open-source, cloud-native Web Application Firewall (WAF) built on NGINX that acts as a reverse proxy to protect web services, APIs, and applications. It ships 'secure by default' with bot blocking, DDoS mitigation, OWASP Top 10 protection, Let's Encrypt integration, and a web UI, deployable on Linux, Docker, Swarm, and Kubernetes.

Use cases

• protect web services behind a reverse proxy with a WAF
• block malicious bots and mitigate DDoS attacks
• secure APIs against OWASP Top 10 threats
• manage HTTPS certificates automatically with Let's Encrypt
• deploy a self-hosted web application firewall in Docker or Kubernetes
• harden NGINX-based hosting with security tuning and DNSBL filtering

When to choose

• you want an open-source, auditable WAF as a reverse proxy in front of existing services
• you deploy on Docker, Swarm, or Kubernetes and need secure-by-default configuration
• you need bot protection, rate limiting, and TLS management in a single entry point
• you prefer a web UI over hand-writing NGINX/ModSecurity configs

When to avoid

• you need a managed cloud WAF with an SLA and vendor support without self-hosting
• your stack is not HTTP/HTTPS-based (e.g., non-web protocols)
• you cannot comply with the AGPL-3.0 license in your product
• you need a lightweight edge proxy without WAF overhead

Facets

service · maturity active

security proxy http-server rate-limiting plugin-system security web-development self-hosted self-hosted python waf reverse-proxy modsecurity nginx antibot letsencrypt ddos-protection owasp devsecops web-application-firewall devops containers linux docker kubernetes web-server

Member repositories

For agents

markdown · JSON · MCP: product_card(name="bunkerity/bunkerweb")