Dev tools · alternatives · 2026

24 alternatives to ngx_waf

Handy, High performance Nginx firewall module.

Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes. ngx_waf launched in 2021; newer entries below may have overtaken it.

1. 1
   Ngx_waf – Open source, Handy, High performance Nginx firewall module▲31

   Handy, High performance, ModSecurity compatible Nginx firewall module & 方便、高性能、兼容 ModSecurity 的 Nginx 防火墙模块 - ADD-SP/ngx_waf

   2021 · github.com · its alternatives →

2. 2
   Bunkerized-Nginx – Nginx Docker image secure by default▲221

   🛡️ Open-source and cloud-native Web Application Firewall (WAF) - bunkerity/bunkerweb

   2020 · github.com · its alternatives →

3. 3
   BunkerWeb – The Open-Source Web Application Firewall (WAF)▲120

   🛡️ Open-source and cloud-native Web Application Firewall (WAF) - bunkerity/bunkerweb

   2024 · github.com · its alternatives →

4. 4
   WAF - Advanced Nginx Management Platform▲11

   Nginx system WAF, Domain Management Real-time Monitoring

   2025 · github.com · its alternatives →

5. 5
   GitHub▲7

   App firewall for your website.

   Nov 2025 · github.com · its alternatives →

6. 6
   BunkerWeb – the open-source and cloud-native WAF▲106

   Documentation of BunkerWeb, the open source and next generation WAF.

   2025 · docs.bunkerweb.io · its alternatives →

7. 7
   WGE▲5

   A high-performance web application firewall (WAF) library based on C++ - stone-rhino/wge

   Nov 2025 · github.com · its alternatives →

8. 8
   Top, but for Nginx▲219

   top for NGINX. Contribute to gsquire/topngx development by creating an account on GitHub.

   2020 · github.com · its alternatives →

9. 9
   BunkerWeb▲6

   Fool attackers and protect your web services with BunkerWeb, the open-source and next-gen Web Application Firewall (WAF).

   Jan 2026 · bunkerweb.io · its alternatives →

10. 10WP
    Wallarm – Protect your web apps or APIs with fast Nginx-based instances▲95

    2016 · wallarm.com · its alternatives →

11. 11
    Nginx Sysguard – throttle requests by load, average request time, etc.▲161

    Nginx sysguard module. Contribute to vozlt/nginx-module-sysguard development by creating an account on GitHub.

    2017 · github.com · its alternatives →

12. 12
    Tux▲80

    A baseline toolkit to ease to streamline website builds.

    2018 · github.com · its alternatives →

13. 13NI
    Nginx Image with HTTP/3 (QUIC), TLS1.3 with 0-RTT, Brotli▲219

    2019 · its alternatives →

14. 14
    Janusec Application Gateway▲2

    WAF and gateway with private key encryption, load balancing.

    2018 · janusec.com · its alternatives →

15. 15
    Wsta – a CLI for working with WebSockets written in Rust▲85

    A CLI development tool for WebSocket APIs. Contribute to eliihen/wsta development by creating an account on GitHub.

    2016 · github.com · its alternatives →

16. 16
    Portr – open-source ngrok alternative designed for teams▲172

    Expose local http, tcp or websocket connections to the public internet - amalshaji/portr

    2024 · github.com · its alternatives →

17. 17NA
    Nchan – a pub/sub server as an Nginx module▲149

    2015 · nchan.slact.net · its alternatives →

18. 18
    A dynamic C (Hot reloading) module-based Web Framework▲128

    A modular web framework for C, inspired by kernel modules. Dynamically upload and compile C code at runtime to build REST APIs, WebSocket services, and more. Includes support for JSON (Jansson), SQLite, OpenSSL, and streaming large data efficiently. - joexbayer/c-web-modules

    2024 · github.com · its alternatives →

19. 19
    WebJSX – A tiny Web Components and JSX library▲26

    2024 · webjsx.org · its alternatives →

20. 20
    Shieldon 2.0 Released Today▲11

    Web Application Firewall (WAF) for PHP. Contribute to terrylinooo/shieldon development by creating an account on GitHub.

    2020 · github.com · its alternatives →

21. 21PA
    Pipenet – A Modern Alternative to Localtunnel▲114

    Hey HN! localtunnel's server needs random ports per client. That doesn't work on Fly.io or behind strict firewalls. We rewrote it in TypeScript and added multiplexing over a single port. Open-source and 100% self-hostable. Public instance at *.pipenet.dev if you don't want to self-host. Built at Glama for our MCP Inspector, but it's a generic tunnel with no ties to our infra. https://github.com/punkpeye/pipenet

    Jan 2026 · pipenet.dev · its alternatives →

22. 22IM
    I made my Raspberry Pi a secret phone homing server▲139

    Tools, calculator, and helpful information for network engineering, web developers, and IT professionals.

    2013 · tunnelsup.com · its alternatives →

23. 23
    Nginx Common Useful Configuration▲77

    Nginx common useful configuration. Contribute to tldr-devops/nginx-common-configuration development by creating an account on GitHub.

    2022 · github.com · its alternatives →

24. 24WD
    Wafxr – dynamic sound FX via WebAudio▲27

    2020 · andyhall.github.io · its alternatives →

Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →