BunkerWeb 1.6.16
Open-source, cloud-native and sovereign Web Application Firewall (WAF) / Web Application and API Protection (WAAP)
Open source badge
Awarded when the project uses an approved open source license.
- 🥇 Gold
- Licensed under an approved open source license
Maintained badge
Awarded when the project meets maintenance health criteria.
- 🥇 Gold
- Multiple active maintainers
- 🥈 Silver
- At least one release in the last 6 months
- 🥉 Bronze
- 5+ commits in 6 months, issues responded to within 7 days
Reused badge
Awarded when the project is packaged and adopted by others.
- 🥇 Gold
- Actively used by 10+ organizations
- 🥈 Silver
- Actively used by at least one organization
- 🥉 Bronze
- Published packages and passing CI in the last 6 months
Security badge
Awarded when the project follows security best practices.
- 🥇 Gold
- No known vulnerabilities at release, critical CVEs fixed within a day
- 🥈 Silver
- 75%+ merge requests reviewed, 80%+ tags signed
- 🥉 Bronze
- Protected branches, security policy, fast issue response
Supply chain badge
Awarded when the supply chain is transparent following SLSA standards.
- 🥇 Gold
- Full build and source provenance traceability
- 🥈 Silver
- VEX attestations for vulnerability assessment
- 🥉 Bronze
- Changelog, contribution guidelines, SBOM attestations
Features
- OWASP Top 10 protection
- Antibot
- HTTPS management
- SSL offloading
- Blacklisting
- Whitelisting
- Detect bad behavior
- Security headers
- Load Balancer
- OpenAPI validator
- mTLS
- Docker
- Linux
- Kubernetes
- Caching
- Geoblocking
Description
Stop OWASP top 10 threats, bots, and DDoS attacks with an open-source, cloud-native and sovereign Web Application Firewall (WAF) / Web Application and API Protection (WAAP) that runs as a reverse proxy and integrates with Linux, Docker, and Kubernetes. Secure by default, extensible via plugins, and easy to manage through a clean UI, giving devs and SecOps both freedom and confidence in their infrastructure.