About BunkerWeb
BunkerWeb is an open source web application firewall that sits in front of your web services as a reverse proxy. It is licensed under AGPL-3.0.
What it does
The proxy receives traffic first, checks it for attacks, and then forwards clean requests to your application. It also manages HTTPS certificates and HTTP security policies from one entry point. The project says it covers threats from the OWASP Top 10, along with malicious bots and some DDoS attacks.
Key features
- Reverse proxy with built-in WAF rules
- Blocks common web attacks from the OWASP Top 10
- Blocks malicious bots and mitigates DDoS
- Manages HTTPS certificates in one place
- Installs on Linux, Docker and Kubernetes
Who it's for
BunkerWeb suits sysadmins and DevOps teams that run self-hosted sites or APIs and want a firewall they can inspect. Teams that do not want to run a proxy themselves may prefer the hosted cloud option.
Pricing and good to know
The core project is free and open source under AGPL-3.0. The vendor also sells a managed cloud WAF service and professional support, which the site describes as turnkey offers. Check the cloud pricing page for current plans if you need a hosted option.
Highlights
- Reverse proxy with built-in WAF rules
- Blocks common web attacks from the OWASP Top 10
- Blocks malicious bots and mitigates DDoS
- Manages HTTPS certificates in one place
- Installs on Linux, Docker and Kubernetes
