nowfound

Dev tools · alternatives · 2026

24 alternatives to BunkerWeb – The Open-Source Web Application Firewall (WAF)

🛡️ Open-source and cloud-native Web Application Firewall (WAF) - bunkerity/bunkerweb

BunkerWeb is an open-source web application firewall designed to protect web applications from common attacks and vulnerabilities. It is for developers and security teams who need to defend their web services without… Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes. BunkerWeb – The Open-Source Web Application Firewall (WAF) launched in 2024; newer entries below may have overtaken it.

  1. 1

    Documentation of BunkerWeb, the open source and next generation WAF.

    2025 · docs.bunkerweb.io · its alternatives →

  2. 2

    Fool attackers and protect your web services with BunkerWeb, the open-source and next-gen Web Application Firewall (WAF).

    Jan 2026 · bunkerweb.io · its alternatives →

  3. 3

    🛡️ Open-source and cloud-native Web Application Firewall (WAF) - bunkerity/bunkerweb

    2020 · github.com · its alternatives →

  4. 4
    Golf▲375

    The enterprise firewall for MCP providers

    Nov 2025 · golf.dev · its alternatives →

  5. 5

    Handy, High performance, ModSecurity compatible Nginx firewall module & 方便、高性能、兼容 ModSecurity 的 Nginx 防火墙模块 - ADD-SP/ngx_waf

    2021 · github.com · its alternatives →

  6. 6
    GitHub▲7

    App firewall for your website.

    Nov 2025 · github.com · its alternatives →

  7. 7
    Warestack▲444

    Agentic guardrails for safe releases

    2025 · warestack.com · its alternatives →

  8. 8

    Deploy static websites in seconds - with HTTPS, a global CDN, and custom domains. - cloudkj/scar

    2019 · github.com · its alternatives →

  9. 9

    A CLI development tool for WebSocket APIs. Contribute to eliihen/wsta development by creating an account on GitHub.

    2016 · github.com · its alternatives →

  10. 10SA

    Hi HN, I’ve been working on Shibuya, a next-generation Web Application Firewall (WAF) built from the ground up in Rust. I wanted to build a WAF that didn't just rely on legacy regex signatures but could understand intent and perform at line-rate using modern kernel features. What makes Shibuya different: Multi-Layer Pipeline: It integrates a high-performance proxy (built on Pingora) with rate limiting, bot detection, and threat intelligence. eBPF Kernel Filtering: For volumetric attacks, Shibuya can drop malicious packets at the kernel level using XDP before they consume userspace resources.…

    Feb 2026 · ghostklan.com · its alternatives →

  11. 11

    Website protection & CMS protection

    Nov 2025 · cybershield-waf.com · its alternatives →

  12. 12

    Enterprise-grade firewall for everyone

    2022 · strongboxit.com · its alternatives →

  13. 13

    A rest application to update firewalld rules on a linux server - GitHub - prashantgupta24/firewalld-rest: A rest application to update firewalld rules on a linux server

    2020 · github.com · its alternatives →

  14. 14

    A lightweight WAF with a hacker style

    Feb 2026 · defender.flmelody.org · its alternatives →

  15. 15

    Web Application Firewall (WAF) for PHP. Contribute to terrylinooo/shieldon development by creating an account on GitHub.

    2020 · github.com · its alternatives →

  16. 16
    WGE▲5

    A high-performance web application firewall (WAF) library based on C++ - stone-rhino/wge

    Nov 2025 · github.com · its alternatives →

  17. 17
    WebARX▲147

    Protect websites from plugin vulnerabilities

    2019 · patchstack.com · its alternatives →

  18. 18

    Howdy folk, I've been building this project as both a side project and my job for a little while now. The rationale behind it is while wireguard is a fantastic protocol cryptographically it leaves a lot to be desired when it comes to enrollment and end user device security. Obviously instead of using an off the shelf solution like tailscale, I decided to reinvent the wheel which has honestly been quite fun with learning about eBPF, and recently clustering and HA with etcd! The most recent version (in the docker container) contains about 6 months of very new work bringing it all from sqlite3…

    2024 · github.com · its alternatives →

  19. 19
    IPFS▲84

    Peer-to-peer hypermedia protocol for Blockchain powered web

    2015 · about.ipfs.io · its alternatives →

  20. 20

    We just open-sourced CargoWall - a lightweight eBPF firewall for GitHub Actions. We originally built it to stop LLM agents from connecting to untrusted domains. After recent GitHub Actions supply chain compromises like the Trivy attack, we realized it'd work well for blocking untrusted connections from CI runners too. It uses iptables DNAT to redirect all outbound port 53 traffic to a local DNS proxy, which checks each query against a hostname allowlist before forwarding. Resolved IPs from allowed responses are inserted into eBPF LPM trie maps, and a TC egress classifier attached to the…

    Mar 2026 · github.com · its alternatives →

  21. 21
    WebWall▲74

    See how websites use your data and block trackers & threats

    2021 · trywebwall.com · its alternatives →

  22. 22
    Bekchy▲20

    Bekchy is a cloud-based web application firewall

    2018 · its alternatives →

  23. 23
    Mask▲116

    A paywall built for the modern web

    2016 · trymask.com · its alternatives →

  24. 24

    An open source cybersecurity protocol for syncing decentralized graph data. - Create new page · amark/gun Wiki

    2016 · github.com · its alternatives →

Also compare

Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →