- Home
- Web Application Firewall Software
- BunkerWeb
BunkerWeb
France
What it is
BunkerWeb is an open-source web application firewall and NGINX-based web server that protects web services as a reverse proxy. Its protections include HTTPS with automated Let's Encrypt, HTTP security headers, TLS hardening, ModSecurity with the OWASP Core Rule Set, and automatic bans for suspicious behavior. It can block known malicious IP addresses using external blacklists and DNS-based blackhole lists. Bot challenges can use cookies, JavaScript, CAPTCHA, hCaptcha, reCAPTCHA, or Turnstile. Supported deployment integrations include Docker, Docker autoconf, Swarm, Kubernetes, and Linux. An optional web UI manages instances and configurations, but is currently supported with Docker and Linux integrations. The open-source software is free under the AGPLv3 license. BunkerWeb also offers a PRO version with pricing based on the number of protected services; its Standard option has no technical support, while Enterprise includes dedicated technical support. Kubernetes Gateway API mode is currently beta. The documentation recommends restricting API access with an IP whitelist and optionally using an API token.
For and against
For
- Includes ModSecurity with the OWASP Core Rule Set
- Offers several bot challenge methods
- Supports Docker, Swarm, Kubernetes, and Linux
- Open-source plan is free under AGPLv3
Against
- Web UI currently supports Docker and Linux integrations
- Kubernetes Gateway API mode is beta
- PRO Standard has no technical support
The verdict
BunkerWeb combines reverse-proxy deployment with web application protections and multiple bot challenges. Review the web UI and beta-mode limits if those capabilities matter to your setup.
Who it suits
BunkerWeb suits teams seeking a self-hosted reverse proxy and web application firewall across its supported deployment integrations. The optional web UI is relevant to users of Docker or Linux integrations.
Plans and prices
BunkerWeb open-source
AGPLv3 license
Read 29 Sep 2026 · docs.bunkerweb.io
BunkerWeb PRO
Standard: no technical support · Enterprise: dedicated technical support
Read 29 Sep 2026 · docs.bunkerweb.io
On the record
- API and security
- The documentation recommends restricting API access with an IP whitelist and optionally using an API token.docs.bunkerweb.io · read 29 Sep 2026
- Bot protection
- Bot challenges can use cookies, JavaScript, CAPTCHA, hCaptcha, reCAPTCHA, or Turnstile.docs.bunkerweb.io · read 29 Sep 2026
- Company
- BunkerWeb is maintained by Bunkerity, a French cybersecurity company.docs.bunkerweb.io · read 29 Sep 2026
- Deployment integrations
- Officially supported integrations include Docker, Docker autoconf, Swarm, Kubernetes, and Linux.docs.bunkerweb.io · read 29 Sep 2026
- IP protection
- BunkerWeb can block known malicious IPs using external blacklists and DNS-based blackhole lists.docs.bunkerweb.io · read 29 Sep 2026
- Limits
- Kubernetes Gateway API mode is currently beta.docs.bunkerweb.io · read 29 Sep 2026
- Product
- BunkerWeb is an open-source web application firewall and NGINX-based web server that protects web services as a reverse proxy.docs.bunkerweb.io · read 29 Sep 2026
- PRO licensing
- PRO licenses are tied to a specific deployment environment, and the PRO plugin requires outbound HTTPS access to api.bunkerweb.io for license checks and premium plugin downloads.docs.bunkerweb.io · read 29 Sep 2026
- PRO trial
- BunkerWeb offers a 30-day PRO free trial through the BunkerWeb Panel.docs.bunkerweb.io · read 29 Sep 2026
- Security
- Core protections include HTTPS with automated Let's Encrypt, HTTP security headers, TLS hardening, ModSecurity with the OWASP Core Rule Set, and automatic bans for suspicious behavior.docs.bunkerweb.io · read 29 Sep 2026
- Support
- Free community support is available through Discord, GitHub Discussions, Reddit, Server Fault, and Super User; professional support and consulting are also offered.docs.bunkerweb.io · read 29 Sep 2026
- Web UI
- The optional web UI manages BunkerWeb instances and configurations; it is currently supported with Docker and Linux integrations.docs.bunkerweb.io · read 29 Sep 2026
