Dev tools · alternatives · 2026
24 alternatives to BunkerWeb
Fool attackers and protect your web services with BunkerWeb, the open-source and next-gen Web Application Firewall (WAF).
Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes.
- 1
🛡️ Open-source and cloud-native Web Application Firewall (WAF) - bunkerity/bunkerweb
2024 · github.com · its alternatives →
- 2
Documentation of BunkerWeb, the open source and next generation WAF.
2025 · docs.bunkerweb.io · its alternatives →
- 3
🛡️ Open-source and cloud-native Web Application Firewall (WAF) - bunkerity/bunkerweb
2020 · github.com · its alternatives →
- 4
- 5
- 6
Handy, High performance, ModSecurity compatible Nginx firewall module & 方便、高性能、兼容 ModSecurity 的 Nginx 防火墙模块 - ADD-SP/ngx_waf
2021 · github.com · its alternatives →
- 7SA
Hi HN, I’ve been working on Shibuya, a next-generation Web Application Firewall (WAF) built from the ground up in Rust. I wanted to build a WAF that didn't just rely on legacy regex signatures but could understand intent and perform at line-rate using modern kernel features. What makes Shibuya different: Multi-Layer Pipeline: It integrates a high-performance proxy (built on Pingora) with rate limiting, bot detection, and threat intelligence. eBPF Kernel Filtering: For volumetric attacks, Shibuya can drop malicious packets at the kernel level using XDP before they consume userspace resources.…
Feb 2026 · ghostklan.com · its alternatives →
- 8
- 9
Web Application Firewall (WAF) for PHP. Contribute to terrylinooo/shieldon development by creating an account on GitHub.
2020 · github.com · its alternatives →
- 10
A CLI development tool for WebSocket APIs. Contribute to eliihen/wsta development by creating an account on GitHub.
2016 · github.com · its alternatives →
- 11
The fast and secure Load Balancer / API Gateway / Reverse Proxy with built-in service discovery, GeoIP, WAF, bot protection and much more - https://pingoo.io - pingooio/pingoo
2025 · github.com · its alternatives →
- 12
- 13
- 14
- 15
A rest application to update firewalld rules on a linux server - GitHub - prashantgupta24/firewalld-rest: A rest application to update firewalld rules on a linux server
2020 · github.com · its alternatives →
- 16
We just open-sourced CargoWall - a lightweight eBPF firewall for GitHub Actions. We originally built it to stop LLM agents from connecting to untrusted domains. After recent GitHub Actions supply chain compromises like the Trivy attack, we realized it'd work well for blocking untrusted connections from CI runners too. It uses iptables DNAT to redirect all outbound port 53 traffic to a local DNS proxy, which checks each query against a hostname allowlist before forwarding. Resolved IPs from allowed responses are inserted into eBPF LPM trie maps, and a TC egress classifier attached to the…
Mar 2026 · github.com · its alternatives →
- 17
💚🇺🇸🗽Secure remote browsing anywhere, any way you like it. - GitHub - BrowserBox/BrowserBox: 💚🇺🇸🗽Secure remote browsing anywhere, any way you like it.
2021 · github.com · its alternatives →
- 18
WGE▲5A high-performance web application firewall (WAF) library based on C++ - stone-rhino/wge
Nov 2025 · github.com · its alternatives →
- 19
An HTTP/HTTPS intercept proxy written in Go. Contribute to rhaidiz/broxy development by creating an account on GitHub.
2020 · github.com · its alternatives →
- 20
- 21
IPFS▲84Peer-to-peer hypermedia protocol for Blockchain powered web
2015 · about.ipfs.io · its alternatives →
- 22
Open source security data lake for threat hunting, detection & response, and cybersecurity analytics at petabyte scale on AWS - matanolabs/matano
2022 · github.com · its alternatives →
- 23
To power the firewalling for our agents so that they couldn't contact arbitrary services, I build netfence. It's like Envoy but for eBPF filters. It allows you to define different DNS-based rules that are resolved in a local daemon to IPs, then pushed to the eBPF filter to allow traffic. By doing it this way, we can still allow DNS-defined rules, but prevent contacting random IPs. There's also no network performance penalty, since it's just DNS lookups and eBPF filters referencing memory. It also means you don't have to tamper with the base image, which the agent could potentially manipulate…
Jan 2026 · github.com · its alternatives →
- 24
A lightweight WAF with a hacker style
Feb 2026 · defender.flmelody.org · its alternatives →
Also compare
- BunkerWeb – The Open-Source Web Application Firewall (WAF) alternatives
- BunkerWeb – the open-source and cloud-native WAF alternatives
- Bunkerized-Nginx – Nginx Docker image secure by default alternatives
- Golf alternatives
- GitHub alternatives
- Ngx_waf – Open source, Handy, High performance Nginx firewall module alternatives
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →