Skip to content
Search

BunkerWeb

lastmod 2025-12-15created 2025-07-082 edits

Open-source cloud-native web firewall

About

  • A next-generation open-source Web Application Firewall (WAF) combining NGINX/Reverse Proxy with a WAF
  • Ships with strong security settings by default and integrates easily into existing environments (Linux, Docker, Kubernetes, etc.)
  • An intuitive Web UI and a plugin system with diverse configuration and extensions ensure full customization and ease of operation
  • Key features
    • Easy yet powerful integrated security features: built-in core security features such as HTTPS (LE automation), ModSecurity (OWASP Core Rule Set), HTTP header hardening, and TLS hardening
    • Automation and ease of operation: optimized for real-world operation with Web UI, automatic configuration via environment variables, labels, and containers (autoconf), multisite mode, scheduler, and more
    • Bot blocking / abnormal request detection: bot defense based on cookies, JS, and CAPTCHA (hCaptcha/reCAPTCHA), automatic blocking based on status codes, integration with external IP blacklists
    • Extension plugin system: official plugins such as ClamAV/VirusTotal file scanning, Slack/Discord/Webhook notifications, and an alternative WAF (Coraza)
  • Supported environments and integrations
    • Integration support: tailored deployment to diverse environments such as Linux, Docker, Kubernetes, Swarm, and Microsoft Azure
    • Configuration: environment variable/label-based configuration, multisite support, custom NGINX/ModSecurity configuration possible
    • Databases: supports SQLite, MariaDB, MySQL, PostgreSQL
    • Web UI: security event monitoring, configuration/plugin management, log search, instance operation control
  • Choose between open source (AGPLv3) and the PRO version (monitoring, enhanced user experience, etc.)
    • Pro provides professional services such as enterprise-grade technical support, monitoring, and consulting

See also

Favorite site

author Zer0 sitemap