
BunkerWeb
Summary
BunkerWeb is an open-source web application firewall and NGINX-based web server that sits in front of web services as a reverse proxy. Its protections include HTTPS with automated Let's Encrypt, HTTP security headers, TLS hardening, ModSecurity with the OWASP Core Rule Set, and automatic bans for suspicious behavior. It can challenge bots using cookies, JavaScript, CAPTCHA, hCaptcha, reCAPTCHA, or Turnstile, and block known malicious IPs through external blacklists and DNS-based blackhole lists. Supported deployment integrations include Docker, Docker autoconf, Swarm, Kubernetes, and Linux. An optional web UI manages instances and configurations, currently with Docker and Linux integrations. The open-source plan is free under the AGPLv3 license. PRO pricing is based on the number of protected services; its Standard option has no technical support, while Enterprise includes dedicated technical support. Kubernetes Gateway API mode is beta. The API documentation recommends limiting access with an IP whitelist and optionally an API token.
Who it is for
BunkerWeb suits teams that want an open-source reverse-proxy firewall across supported deployment environments. Its optional UI is currently for Docker and Linux integrations, while Kubernetes Gateway API mode remains beta.
What is good
- Free open-source plan under AGPLv3
- Automated HTTPS and multiple security protections
- Bot challenges include CAPTCHA and other options
- Supports Docker, Swarm, Kubernetes, and Linux
- Rate limiting and managed rule sets
What to know first
- Kubernetes Gateway API mode is beta
- Optional UI supports Docker and Linux integrations
- PRO license is tied to a deployment environment
- PRO plugin needs outbound HTTPS for license checks
Verdict
BunkerWeb combines a reverse proxy with web application firewall protections and several deployment integrations. Check the beta status and UI integration limits against your setup before choosing it.
BunkerWeb plans and pricing
All plansCompared on reverse proxy software
- Free plan
- Yesbunkerweb.io
- Rate limiting
- Yesbunkerweb.io
Facts
- Product
- BunkerWeb is an open-source web application firewall and NGINX-based web server that protects web services as a reverse proxy.docs.bunkerweb.io · 29 Sept 2026
- Security
- Core protections include HTTPS with automated Let's Encrypt, HTTP security headers, TLS hardening, ModSecurity with the OWASP Core Rule Set, and automatic bans for suspicious behavior.docs.bunkerweb.io · 29 Sept 2026
- Bot protection
- Bot challenges can use cookies, JavaScript, CAPTCHA, hCaptcha, reCAPTCHA, or Turnstile.docs.bunkerweb.io · 29 Sept 2026
- IP protection
- BunkerWeb can block known malicious IPs using external blacklists and DNS-based blackhole lists.docs.bunkerweb.io · 29 Sept 2026
- Deployment integrations
- Officially supported integrations include Docker, Docker autoconf, Swarm, Kubernetes, and Linux.docs.bunkerweb.io · 29 Sept 2026
- Web UI
- The optional web UI manages BunkerWeb instances and configurations; it is currently supported with Docker and Linux integrations.docs.bunkerweb.io · 29 Sept 2026
- API and security
- The documentation recommends restricting API access with an IP whitelist and optionally using an API token.docs.bunkerweb.io · 29 Sept 2026
- Limits
- Kubernetes Gateway API mode is currently beta.docs.bunkerweb.io · 29 Sept 2026
- PRO trial
- BunkerWeb offers a 30-day PRO free trial through the BunkerWeb Panel.docs.bunkerweb.io · 29 Sept 2026
- PRO licensing
- PRO licenses are tied to a specific deployment environment, and the PRO plugin requires outbound HTTPS access to api.bunkerweb.io for license checks and premium plugin downloads.docs.bunkerweb.io · 29 Sept 2026
- Support
- Free community support is available through Discord, GitHub Discussions, Reddit, Server Fault, and Super User; professional support and consulting are also offered.docs.bunkerweb.io · 29 Sept 2026
- Company
- BunkerWeb is maintained by Bunkerity, a French cybersecurity company.docs.bunkerweb.io · 29 Sept 2026
Company
- Headquarters
- Francebunkerweb.io · 28 Sept 2026
Best BunkerWeb alternatives
See all 12Where it ranks on Everything Xiaomi
Is BunkerWeb yours?
Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.
Sources
- docs.bunkerweb.io/latest/· checked 29 Sept 2026
- docs.bunkerweb.io/concepts/· checked 29 Sept 2026
- docs.bunkerweb.io/latest/web-ui/· checked 29 Sept 2026
- docs.bunkerweb.io/latest/integrations/· checked 29 Sept 2026
- docs.bunkerweb.io/latest/about/· checked 29 Sept 2026
- docs.bunkerweb.io/1.6.2-rc7/features/· checked 29 Sept 2026
- bunkerweb.io· checked 28 Sept 2026






