BunkerWeb
AGPL-3.0🕸 Web Scanning · Python
BunkerWeb is an open-source WAF built on top of NGINX that provides automatic security hardening for web applications. It integrates seamlessly via Docker, Kubernetes, Linux packages, or as a reverse proxy. BunkerWeb includes ModSecurity with OWASP Core Rule Set, automatic TLS via Let's Encrypt, bot detection, rate limiting, IP reputation blocking, country-based access control, and anti-DDoS protections. Its plugin system allows extending functionality with custom Lua scripts. Configuration is managed through a web UI or API.
Installation
$ docker pull bunkerity/bunkerwebUse Cases
- Deploying a WAF in front of web applications
- Automated TLS certificate management
- Bot detection and IP reputation filtering
- Rate limiting and DDoS mitigation
Tags
Details
- Category
- 🕸 Web Scanning
- Language
- Python
- Repository
- bunkerity/bunkerweb
- License
- AGPL-3.0
- Platforms
- 🐧linux🍎macos🪟windows
Links
Community Reviews
Alternatives & Comparisons
More in Web Scanning
httpx
GoFast multi-purpose HTTP toolkit. Probes for running HTTP servers with retries and fallbacks.
Nikto
PerlClassic web server scanner. Tests for dangerous files, outdated server software, and version-specific problems.
Gobuster
GoDirectory/file, DNS, and vhost busting tool. Brute-forces URIs, DNS subdomains, virtual host names, and S3 buckets.
Feroxbuster
RustFast, recursive content discovery tool written in Rust. Like gobuster on steroids with auto-recursion.
Burp Suite Community
JavaWeb vulnerability scanner and proxy. Intercept, modify, and replay HTTP/S traffic for web app testing.
ffuf
GoFast web fuzzer written in Go. Fuzz anything - URLs, headers, POST data - with blazing speed.