bunkerity

    bunkerity/bunkerweb

    🛡️ Open-source and cloud-native Web Application Firewall (WAF)

    11.2K stars
    668 forks
    11.2K GitHub watchers
    Updated Nov 4, 2026
    View on GitHub

    Build with Backblaze B2

    SDKs, agent skills, IDE extensions, and reference pipelines from Backblaze Labs. All open source.

    Explore Backblaze Labs

    Loading star history...

    Where it stands

    Rank, growth pace and release cadence relative to everything GStars tracks.

    5 releases in the last 90 days, the latest 5 days ago, with 57 contributors on GitHub.

    Gained 24% more stars in the last 90 days than in the 90 days before.

    Use Cases & Benefits

    • Provides an open-source, cloud-native Web Application Firewall (WAF) based on NGINX to protect web services with security by default.
    • Offers seamless integration into diverse environments like Linux, Docker, Kubernetes, and Swarm with a highly customizable plugin system and an intuitive web UI.
    • Use for securing single or multiple web applications with minimal configuration using multisite mode and automatic HTTPS via Let's Encrypt.
    • Use for deploying in containerized environments with real-time auto-configuration through Docker autoconf or Kubernetes ingress controller support.
    • Ideal for organizations needing advanced security tuning, bot mitigation, and integration with external blacklists and ModSecurity OWASP rules.

    Should you depend on it?

    License terms, project hygiene and risks, from GitHub metadata and GStars' snapshots.

    License

    AGPL 3.0

    Network copyleft: like the GPL, and also triggered by offering the software over a network.

    Community files

    • README: present
    • Contributing guide: present
    • Code of conduct: present

    Watch-outs

    • AGPL-style copyleft also applies when the software is offered over a network.

    General guidance from repository metadata, not legal advice. How we score

    From the README

    🛡️ Make security by default great again!

    BunkerWeb is a next-generation, open-source Web Application Firewall (WAF).

    Being a full-featured web server (based on NGINX under the hood), it will protect your web services to make them "secure by default." BunkerWeb integrates seamlessly into your existing environments (Linux, Docker, Swarm, Kubernetes, …) as a reverse proxy and is fully configurable (don't panic, there is an awesome web UI if you don't like the CLI) to meet your own use cases. In other words, cybersecurity is no longer a hassle.

    BunkerWeb contains primary security features as part of the core but can be easily extended with additional ones thanks to a plugin system.

    Excerpt from the bunkerity/bunkerweb README on GitHub (AGPL-3.0 license). © its authors.Read the full README on GitHub

    Daily snapshots

    Stars gained per day, and how forks and open issues moved, from GStars' daily snapshots

    Forks

    668+33

    Open issues

    159-20

    Compared with peers in Security

    Fastest-growing repositories GStars tracks in this cohort for the week of Nov 8, by 7-day star growth

    bunkerity/bunkerweb compared with Security repositories by stars, 7-day star growth, health score and last release
    RepositoryStars+7dHealthLast release
    cloudflare/security-audit-skill69.3K+10.7K75—
    vxcontrol/pentagi33.9K+7197536 days ago
    GyulyVGC/sniffnet42.3K+42275111 days ago
    soxoj/maigret39.9K+3326087 days ago
    Asymptote-Labs/agent-beacon3.4K+315751 day ago
    bunkerity/bunkerweb11.2K—655 days ago
    Category median39.9K+42275—

    Discover Repositories

    Search across tracked repositories by name or description