BunkerWeb

Next-gen Web Application Firewall (WAF) that will protect your web services.

Thriving · 84
84/100
Thriving

High commit volume, frequent releases and growing activity.

Maintenance 35/40
Releases 25/25
Community 16/20
Momentum 8/15

Commit activity more than 88% of tracked projects; popularity more than 80%. How this is calculated.

Commits, last 11 months

2025-10: 215 commits 2025-11: 164 commits 2025-12: 137 commits 2026-01: 170 commits 2026-02: 152 commits 2026-03: 192 commits 2026-04: 163 commits 2026-05: 228 commits 2026-06: 159 commits 2026-07: 176 commits 2026-08: 159 commits
2025-10 1915 total 2026-08
Stars11k
Latest releasev1.6.16-rc2 · 25 Sept 2026
Repo updated21 Sept 2026
LicenceAGPL-3.0
Built withdeb, Docker, K8S, Python

Is BunkerWeb actively maintained?

Over the last 11 months the project absorbed 1915 commits, of which 494 arrived in the most recent quarter — roughly 165 commits a month.

The most recent tagged release, v1.6.16-rc2, shipped within the last month — a current, installable version exists today.

Of the 19 projects we track in Web Servers, BunkerWeb ranks #3 by health score — in the top quarter of its category.

What BunkerWeb actually does

BunkerWeb functions as a web application firewall designed to protect HTTP-based services from common cyber attacks. It integrates into your infrastructure to inspect traffic before it reaches your backend applications.

Best fit: Self-hosters who need an additional security layer in front of their web services and prefer open-source perimeter defence.

Worth knowing: Configuring a WAF often introduces complexity regarding false positives, which can block legitimate traffic unless tuned carefully.

Deployment notes

It typically runs via containers like Docker or Kubernetes, requiring persistent storage for logs and configuration data alongside an appropriate reverse proxy setup.


Alternatives to BunkerWeb

Projects in the same categories, ordered by health score.