Dev tools · alternatives · 2026
24 alternatives to BunkerWeb – The Open-Source Web Application Firewall (WAF)
🛡️ Open-source and cloud-native Web Application Firewall (WAF) - bunkerity/bunkerweb
BunkerWeb is an open-source web application firewall designed to protect web applications from common attacks and vulnerabilities. It is for developers and security teams who need to defend their web services without… Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes. BunkerWeb – The Open-Source Web Application Firewall (WAF) launched in 2024; newer entries below may have overtaken it.
- 1

Documentation of BunkerWeb, the open source and next generation WAF.
2025 · docs.bunkerweb.io · its alternatives →
- 2

Fool attackers and protect your web services with BunkerWeb, the open-source and next-gen Web Application Firewall (WAF).
Jan 2026 · bunkerweb.io · its alternatives →
- 3

🛡️ Open-source and cloud-native Web Application Firewall (WAF) - bunkerity/bunkerweb
2020 · github.com · its alternatives →
- 4

- 5

Handy, High performance, ModSecurity compatible Nginx firewall module & 方便、高性能、兼容 ModSecurity 的 Nginx 防火墙模块 - ADD-SP/ngx_waf
2021 · github.com · its alternatives →
- 6

- 7

- 8

Deploy static websites in seconds - with HTTPS, a global CDN, and custom domains. - cloudkj/scar
2019 · github.com · its alternatives →
- 9

A CLI development tool for WebSocket APIs. Contribute to eliihen/wsta development by creating an account on GitHub.
2016 · github.com · its alternatives →
- 10SA
Hi HN, I’ve been working on Shibuya, a next-generation Web Application Firewall (WAF) built from the ground up in Rust. I wanted to build a WAF that didn't just rely on legacy regex signatures but could understand intent and perform at line-rate using modern kernel features. What makes Shibuya different: Multi-Layer Pipeline: It integrates a high-performance proxy (built on Pingora) with rate limiting, bot detection, and threat intelligence. eBPF Kernel Filtering: For volumetric attacks, Shibuya can drop malicious packets at the kernel level using XDP before they consume userspace resources.…
Feb 2026 · ghostklan.com · its alternatives →
- 11

- 12

- 13

A rest application to update firewalld rules on a linux server - GitHub - prashantgupta24/firewalld-rest: A rest application to update firewalld rules on a linux server
2020 · github.com · its alternatives →
- 14

A lightweight WAF with a hacker style
Feb 2026 · defender.flmelody.org · its alternatives →
- 15

Web Application Firewall (WAF) for PHP. Contribute to terrylinooo/shieldon development by creating an account on GitHub.
2020 · github.com · its alternatives →
- 16
WGE▲5A high-performance web application firewall (WAF) library based on C++ - stone-rhino/wge
Nov 2025 · github.com · its alternatives →
- 17

- 18

Howdy folk, I've been building this project as both a side project and my job for a little while now. The rationale behind it is while wireguard is a fantastic protocol cryptographically it leaves a lot to be desired when it comes to enrollment and end user device security. Obviously instead of using an off the shelf solution like tailscale, I decided to reinvent the wheel which has honestly been quite fun with learning about eBPF, and recently clustering and HA with etcd! The most recent version (in the docker container) contains about 6 months of very new work bringing it all from sqlite3…
2024 · github.com · its alternatives →
- 19
IPFS▲84Peer-to-peer hypermedia protocol for Blockchain powered web
2015 · about.ipfs.io · its alternatives →
- 20

We just open-sourced CargoWall - a lightweight eBPF firewall for GitHub Actions. We originally built it to stop LLM agents from connecting to untrusted domains. After recent GitHub Actions supply chain compromises like the Trivy attack, we realized it'd work well for blocking untrusted connections from CI runners too. It uses iptables DNAT to redirect all outbound port 53 traffic to a local DNS proxy, which checks each query against a hostname allowlist before forwarding. Resolved IPs from allowed responses are inserted into eBPF LPM trie maps, and a TC egress classifier attached to the…
Mar 2026 · github.com · its alternatives →
- 21
WebWall▲74See how websites use your data and block trackers & threats
2021 · trywebwall.com · its alternatives →
- 22

- 23

- 24

An open source cybersecurity protocol for syncing decentralized graph data. - Create new page · amark/gun Wiki
2016 · github.com · its alternatives →
Also compare
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →