Life & fun · alternatives · 2026
24 alternatives to Modshield SB
Enterprise-grade firewall for everyone
Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes. Modshield SB launched in 2022; newer entries below may have overtaken it.
- 1
- 2
🛡️ Open-source and cloud-native Web Application Firewall (WAF) - bunkerity/bunkerweb
2024 · github.com · its alternatives →
- 3
- 4
ActivShield▲117Control your website traffic with click and block technology
2017 · its alternatives →
- 5
Documentation of BunkerWeb, the open source and next generation WAF.
2025 · docs.bunkerweb.io · its alternatives →
- 6
Fool attackers and protect your web services with BunkerWeb, the open-source and next-gen Web Application Firewall (WAF).
Jan 2026 · bunkerweb.io · its alternatives →
- 7
- 8
Time to announce Noisy Sockets Shell, the first in a series of WireGuard powered applications I'm working on. Noisy Sockets Shell is an SSH replacement that uses WireGuard for authentication and encryption, and WebSockets for communication. CLI and browser client available.
2024 · github.com · its alternatives →
- 9
- 10
Handy, High performance, ModSecurity compatible Nginx firewall module & 方便、高性能、兼容 ModSecurity 的 Nginx 防火墙模块 - ADD-SP/ngx_waf
2021 · github.com · its alternatives →
- 11
Web Application Firewall (WAF) for PHP. Contribute to terrylinooo/shieldon development by creating an account on GitHub.
2020 · github.com · its alternatives →
- 12
Open Source, Cross-Platform Web Application Firewall
2018 · modsecurity.org · its alternatives →
- 13
WGE▲5A high-performance web application firewall (WAF) library based on C++ - stone-rhino/wge
Nov 2025 · github.com · its alternatives →
- 14SA
Hi HN, I’ve been working on Shibuya, a next-generation Web Application Firewall (WAF) built from the ground up in Rust. I wanted to build a WAF that didn't just rely on legacy regex signatures but could understand intent and perform at line-rate using modern kernel features. What makes Shibuya different: Multi-Layer Pipeline: It integrates a high-performance proxy (built on Pingora) with rate limiting, bot detection, and threat intelligence. eBPF Kernel Filtering: For volumetric attacks, Shibuya can drop malicious packets at the kernel level using XDP before they consume userspace resources.…
Feb 2026 · ghostklan.com · its alternatives →
- 15
CodeShield▲78Detect and fix IAM privilege escalations in your AWS account
2022 · codeshield.io · its alternatives →
- 16
Fast, private networks for your team in minutes
2022 · firezone.dev · its alternatives →
- 17
- 18
To power the firewalling for our agents so that they couldn't contact arbitrary services, I build netfence. It's like Envoy but for eBPF filters. It allows you to define different DNS-based rules that are resolved in a local daemon to IPs, then pushed to the eBPF filter to allow traffic. By doing it this way, we can still allow DNS-defined rules, but prevent contacting random IPs. There's also no network performance penalty, since it's just DNS lookups and eBPF filters referencing memory. It also means you don't have to tamper with the base image, which the agent could potentially manipulate…
Jan 2026 · github.com · its alternatives →
- 19
- 20
A security firewall for React Server Components
Dec 2025 · github.com · its alternatives →
- 21
- 22
- 23
- 24
Also compare
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →