Dev tools · alternatives · 2026
24 alternatives to Bekchy
Bekchy is a cloud-based web application firewall
Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes. Bekchy launched in 2018; newer entries below may have overtaken it.
- 1
🛡️ Open-source and cloud-native Web Application Firewall (WAF) - bunkerity/bunkerweb
2024 · github.com · its alternatives →
- 2
Documentation of BunkerWeb, the open source and next generation WAF.
2025 · docs.bunkerweb.io · its alternatives →
- 3
- 4
- 5
🛡️ Open-source and cloud-native Web Application Firewall (WAF) - bunkerity/bunkerweb
2020 · github.com · its alternatives →
- 6LS
2020 · lynk.sh · its alternatives →
- 7WA
2012 · cloudshark.org · its alternatives →
- 8
- 9
An HTTP/HTTPS intercept proxy written in Go. Contribute to rhaidiz/broxy development by creating an account on GitHub.
2020 · github.com · its alternatives →
- 10
A rest application to update firewalld rules on a linux server - GitHub - prashantgupta24/firewalld-rest: A rest application to update firewalld rules on a linux server
2020 · github.com · its alternatives →
- 11
Fool attackers and protect your web services with BunkerWeb, the open-source and next-gen Web Application Firewall (WAF).
Jan 2026 · bunkerweb.io · its alternatives →
- 12
- 13
- 14SA
Hi HN, I’ve been working on Shibuya, a next-generation Web Application Firewall (WAF) built from the ground up in Rust. I wanted to build a WAF that didn't just rely on legacy regex signatures but could understand intent and perform at line-rate using modern kernel features. What makes Shibuya different: Multi-Layer Pipeline: It integrates a high-performance proxy (built on Pingora) with rate limiting, bot detection, and threat intelligence. eBPF Kernel Filtering: For volumetric attacks, Shibuya can drop malicious packets at the kernel level using XDP before they consume userspace resources.…
Feb 2026 · ghostklan.com · its alternatives →
- 15
eBPF is an amazing technology that allows safely running user-supplied functions at pretty much arbitrary probe points in a kernel/user space context. Much has been written about how amazing this feature is for kernel observability. But as someone who writes user space code, what I find even more amazing is the support for tracing arbitrary user space programs, with no code changes and low overhead. However, doing in-depth analysis can get complicated and time-consuming. My goal with wachy was to make this debugging significantly easier/faster to use, by displaying traces in a TUI…
2022 · rubrikinc.github.io · its alternatives →
- 16
Encrypted, secure, private web connection for safe browsing
2020 · vpnunlimited.com · its alternatives →
- 17
Next-generation JWT debugger (with ChatGPT)
2023 · jwt.is · its alternatives →
- 18
- 19
This is an educational reference implementation showing how to build reasonably secure, standards-compliant authentication from first principles on Cloudflare Workers. Stack: Hono, Turso (libSQL), PBKDF2-SHA384 + normalization + common-password checks, JWT access + refresh tokens with revocation support, HTTP-only SameSite cookies, device tracking. It's deliberately minimal — no OAuth, no passkeys, no magic links, no rate limiting — because the goal is clarity and auditability. I wrote it mainly to deeply understand edge-runtime auth constraints and to have a clean Apache-2.0 example that…
Feb 2026 · github.com · its alternatives →
- 20
To power the firewalling for our agents so that they couldn't contact arbitrary services, I build netfence. It's like Envoy but for eBPF filters. It allows you to define different DNS-based rules that are resolved in a local daemon to IPs, then pushed to the eBPF filter to allow traffic. By doing it this way, we can still allow DNS-defined rules, but prevent contacting random IPs. There's also no network performance penalty, since it's just DNS lookups and eBPF filters referencing memory. It also means you don't have to tamper with the base image, which the agent could potentially manipulate…
Jan 2026 · github.com · its alternatives →
- 21
Automated security assistant for developers
2020 · shieldfy.io · its alternatives →
- 22KO
2016 · kloudsec.com · its alternatives →
- 23
- 24JI
The team at Rownd is excited to announce https://jwt.is, an updated take on JSON Web Token debugging. Like most developers, we've used jwt.io for years, but it lacks a number of useful features that would make it even more convenient. We're building on the shoulders of those who've come before us. :-) In addition to the basic JWT decoding and signature verification, we've added things like: - Verification using JWK endpoints - Locally stored history of tokens and keys - Verification for EdDSA signatures - Detection of common token providers (e.g., Google, Apple, etc) - Dark mode!…
2023 · its alternatives →
Also compare
- BunkerWeb – The Open-Source Web Application Firewall (WAF) alternatives
- BunkerWeb – the open-source and cloud-native WAF alternatives
- Golf alternatives
- Warestack alternatives
- Bunkerized-Nginx – Nginx Docker image secure by default alternatives
- Lynk – Securely expose local TCP and HTTP services to the web alternatives
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →