BunkerWeb

BunkerWeb is an open-source web application firewall that sits in front of web services to secure them by default. It is a full-featured web server based on NGINX and can run as a reverse proxy in existing Linux, Docker, Swarm, and Kubernetes environments.

Security features include HTTPS with Let's Encrypt automation, HTTP security headers, TLS hardening, automatic bans based on HTTP status codes, connection and request limits, bot challenges, DNSBL blocking, external IP blacklists, and an integrated ModSecurity WAF with the OWASP Core Rule Set. A plugin system extends these core features.

An optional web UI manages instances and their configurations, and a CLI is also available. BunkerWeb is licensed under AGPLv3. BunkerWeb Cloud is a fully managed SaaS offering for teams that prefer not to self-host.