The BunkerWeb homepage
Score6.8
Rank#11 of 33
PriceFree
Free planYes
Free trialYes
Runs onAPI, Linux, Self-hosted, Web

Summary

BunkerWeb is an open-source web application firewall and NGINX-based web server that sits in front of web services as a reverse proxy. Its protections include HTTPS with automated Let's Encrypt, HTTP security headers, TLS hardening, ModSecurity with the OWASP Core Rule Set, and automatic bans for suspicious behavior. It can challenge bots using cookies, JavaScript, CAPTCHA, hCaptcha, reCAPTCHA, or Turnstile, and block known malicious IPs through external blacklists and DNS-based blackhole lists. Supported deployment integrations include Docker, Docker autoconf, Swarm, Kubernetes, and Linux. An optional web UI manages instances and configurations, currently with Docker and Linux integrations. The open-source plan is free under the AGPLv3 license. PRO pricing is based on the number of protected services; its Standard option has no technical support, while Enterprise includes dedicated technical support. Kubernetes Gateway API mode is beta. The API documentation recommends limiting access with an IP whitelist and optionally an API token.

Who it is for

BunkerWeb suits teams that want an open-source reverse-proxy firewall across supported deployment environments. Its optional UI is currently for Docker and Linux integrations, while Kubernetes Gateway API mode remains beta.

What is good

  • Free open-source plan under AGPLv3
  • Automated HTTPS and multiple security protections
  • Bot challenges include CAPTCHA and other options
  • Supports Docker, Swarm, Kubernetes, and Linux
  • Rate limiting and managed rule sets

What to know first

  • Kubernetes Gateway API mode is beta
  • Optional UI supports Docker and Linux integrations
  • PRO license is tied to a deployment environment
  • PRO plugin needs outbound HTTPS for license checks

Verdict

BunkerWeb combines a reverse proxy with web application firewall protections and several deployment integrations. Check the beta status and UI integration limits against your setup before choosing it.

BunkerWeb plans and pricing

All plans
BunkerWeb open-source Free AGPLv3 license docs.bunkerweb.io · 29 Sept 2026
BunkerWeb PRO Not published Pricing options based on the number of services protected Standard: no technical support · Enterprise: dedicated technical support docs.bunkerweb.io · 29 Sept 2026

Compared on reverse proxy software

Free plan
Yesbunkerweb.io
Rate limiting
Yesbunkerweb.io

Facts

Product
BunkerWeb is an open-source web application firewall and NGINX-based web server that protects web services as a reverse proxy.docs.bunkerweb.io · 29 Sept 2026
Security
Core protections include HTTPS with automated Let's Encrypt, HTTP security headers, TLS hardening, ModSecurity with the OWASP Core Rule Set, and automatic bans for suspicious behavior.docs.bunkerweb.io · 29 Sept 2026
Bot protection
Bot challenges can use cookies, JavaScript, CAPTCHA, hCaptcha, reCAPTCHA, or Turnstile.docs.bunkerweb.io · 29 Sept 2026
IP protection
BunkerWeb can block known malicious IPs using external blacklists and DNS-based blackhole lists.docs.bunkerweb.io · 29 Sept 2026
Deployment integrations
Officially supported integrations include Docker, Docker autoconf, Swarm, Kubernetes, and Linux.docs.bunkerweb.io · 29 Sept 2026
Web UI
The optional web UI manages BunkerWeb instances and configurations; it is currently supported with Docker and Linux integrations.docs.bunkerweb.io · 29 Sept 2026
API and security
The documentation recommends restricting API access with an IP whitelist and optionally using an API token.docs.bunkerweb.io · 29 Sept 2026
Limits
Kubernetes Gateway API mode is currently beta.docs.bunkerweb.io · 29 Sept 2026
PRO trial
BunkerWeb offers a 30-day PRO free trial through the BunkerWeb Panel.docs.bunkerweb.io · 29 Sept 2026
PRO licensing
PRO licenses are tied to a specific deployment environment, and the PRO plugin requires outbound HTTPS access to api.bunkerweb.io for license checks and premium plugin downloads.docs.bunkerweb.io · 29 Sept 2026
Support
Free community support is available through Discord, GitHub Discussions, Reddit, Server Fault, and Super User; professional support and consulting are also offered.docs.bunkerweb.io · 29 Sept 2026
Company
BunkerWeb is maintained by Bunkerity, a French cybersecurity company.docs.bunkerweb.io · 29 Sept 2026

Company

Headquarters
Francebunkerweb.io · 28 Sept 2026

Best BunkerWeb alternatives

See all 12

Where it ranks on Everything Xiaomi

Is BunkerWeb yours?

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.

Sources