Dev tools · alternatives · 2026

24 alternatives to Ngx_waf – Open source, Handy, High performance Nginx firewall module

Handy, High performance, ModSecurity compatible Nginx firewall module & 方便、高性能、兼容 ModSecurity 的 Nginx 防火墙模块 - ADD-SP/ngx_waf

Ngx_waf is an open-source firewall module for Nginx that filters malicious traffic at the web server level. Designed for developers and system administrators, it integrates directly into Nginx to provide protection… Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes. Ngx_waf – Open source, Handy, High performance Nginx firewall module launched in 2021; newer entries below may have overtaken it.

1. 1
   ngx_waf▲3

   Handy, High performance Nginx firewall module.

   2021 · github.com · its alternatives →

2. 2
   Bunkerized-Nginx – Nginx Docker image secure by default▲221

   🛡️ Open-source and cloud-native Web Application Firewall (WAF) - bunkerity/bunkerweb

   2020 · github.com · its alternatives →

3. 3
   BunkerWeb – The Open-Source Web Application Firewall (WAF)▲120

   🛡️ Open-source and cloud-native Web Application Firewall (WAF) - bunkerity/bunkerweb

   2024 · github.com · its alternatives →

4. 4
   WAF - Advanced Nginx Management Platform▲11

   Nginx system WAF, Domain Management Real-time Monitoring

   2025 · github.com · its alternatives →

5. 5
   WGE▲5

   A high-performance web application firewall (WAF) library based on C++ - stone-rhino/wge

   Nov 2025 · github.com · its alternatives →

6. 6
   GitHub▲7

   App firewall for your website.

   Nov 2025 · github.com · its alternatives →

7. 7
   BunkerWeb – the open-source and cloud-native WAF▲106

   Documentation of BunkerWeb, the open source and next generation WAF.

   2025 · docs.bunkerweb.io · its alternatives →

8. 8
   BunkerWeb▲6

   Fool attackers and protect your web services with BunkerWeb, the open-source and next-gen Web Application Firewall (WAF).

   Jan 2026 · bunkerweb.io · its alternatives →

9. 9
   Nginx Sysguard – throttle requests by load, average request time, etc.▲161

   Nginx sysguard module. Contribute to vozlt/nginx-module-sysguard development by creating an account on GitHub.

   2017 · github.com · its alternatives →

10. 10WP
    Wallarm – Protect your web apps or APIs with fast Nginx-based instances▲95

    2016 · wallarm.com · its alternatives →

11. 11NI
    Nginx Image with HTTP/3 (QUIC), TLS1.3 with 0-RTT, Brotli▲219

    2019 · its alternatives →

12. 12
    Modshield SB▲16

    Enterprise-grade firewall for everyone

    2022 · strongboxit.com · its alternatives →

13. 13
    Top, but for Nginx▲219

    top for NGINX. Contribute to gsquire/topngx development by creating an account on GitHub.

    2020 · github.com · its alternatives →

14. 14
    Portr – open-source ngrok alternative designed for teams▲172

    Expose local http, tcp or websocket connections to the public internet - amalshaji/portr

    2024 · github.com · its alternatives →

15. 15
    Shieldon 2.0 Released Today▲11

    Web Application Firewall (WAF) for PHP. Contribute to terrylinooo/shieldon development by creating an account on GitHub.

    2020 · github.com · its alternatives →

16. 16
    Janusec Application Gateway▲2

    WAF and gateway with private key encryption, load balancing.

    2018 · janusec.com · its alternatives →

17. 17
    WebARX▲147

    Protect websites from plugin vulnerabilities

    2019 · patchstack.com · its alternatives →

18. 18
    Wsta – a CLI for working with WebSockets written in Rust▲85

    A CLI development tool for WebSocket APIs. Contribute to eliihen/wsta development by creating an account on GitHub.

    2016 · github.com · its alternatives →

19. 19
    Pingoo – A reverse proxy with built-in WAF and bot protection (in Rust)▲17

    The fast and secure Load Balancer / API Gateway / Reverse Proxy with built-in service discovery, GeoIP, WAF, bot protection and much more - https://pingoo.io - pingooio/pingoo

    2025 · github.com · its alternatives →

20. 20SA
    Shibuya – A High-Performance WAF in Rust with eBPF and ML Engine▲22

    Hi HN, I’ve been working on Shibuya, a next-generation Web Application Firewall (WAF) built from the ground up in Rust. I wanted to build a WAF that didn't just rely on legacy regex signatures but could understand intent and perform at line-rate using modern kernel features. What makes Shibuya different: Multi-Layer Pipeline: It integrates a high-performance proxy (built on Pingora) with rate limiting, bot detection, and threat intelligence. eBPF Kernel Filtering: For volumetric attacks, Shibuya can drop malicious packets at the kernel level using XDP before they consume userspace resources.…

    Feb 2026 · ghostklan.com · its alternatives →

21. 21IM
    I made my Raspberry Pi a secret phone homing server▲139

    Tools, calculator, and helpful information for network engineering, web developers, and IT professionals.

    2013 · tunnelsup.com · its alternatives →

22. 22NR
    New release of Tarantool Upstream NginX module – v0.2.0-stable▲14

    I'm proud to annonce new release of Tarantool Upstream NginX module - v0.2.0-stable. New features: - Build with NginX and Tarantool fast and scalable REST services. - Better documentation. - A lot of new nginx.conf directives. - Few minor bug fixes. Read more about REST features https://github.com/tarantool/nginx_upstream_module#rest https://www.facebook.com/TarantoolDatabase/

    2016 · its alternatives →

23. 23
    ipscrub, an IP address anonymizer for Nginx▲42

    IP address anonymizer module for nginx. Contribute to masonicboom/ipscrub development by creating an account on GitHub.

    2018 · github.com · its alternatives →

24. 24NA
    Nchan – a pub/sub server as an Nginx module▲149

    2015 · nchan.slact.net · its alternatives →

Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →