Bunkerity

Open source Cybersecurity solutions. Let's fool attackers. 🛡️

[Vivek | Cybersecurity @VivekIntel]

🛡️ 𝗕𝘂𝗻𝗸𝗲𝗿𝗪𝗲𝗯 — 𝗪𝗲𝗯 𝗔𝗽𝗽𝗹𝗶𝗰𝗮𝘁𝗶𝗼𝗻 𝗙𝗶𝗿𝗲𝘄𝗮𝗹𝗹

Secure your web apps by default

• Built on NGINX (acts as reverse proxy + WAF)
• Integrated ModSecurity + OWASP CRS
• HTTPS + Let’s Encrypt automation
• Blocks bots, bad IPs, brute-force attempts
• Rate limiting + request filtering
• Anti-bot challenges (captcha, JS, cookie)
• Plugin system (ClamAV, VirusTotal, Slack alerts)
• Web UI for easy management
• Works with Docker, Kubernetes, Linux

“Secure by default” web protection

https://t.co/pAhfrER2tC

#WAF #WebSecurity #CyberSecurity

[IT-Connect.fr @ITConnect_fr]

Sécurisez vos services web avec BunkerWeb : reverse proxy et WAF open-source https://t.co/0ziUEDLOSS

[Clandestine @akaclandestine]

GitHub - bunkerity/bunkerweb: 🛡️ Open-source and next-generation Web Application Firewall (WAF) · GitHub https://t.co/7VjYWtXUDF

[Daily Open-Source @dailyfoss]

🌐 https://t.co/uMQwOxlRJW

✨ Features:
* Web app firewall
* Reverse proxy
* Security rules
* Container support
* Automatic HTTPS
* Real-time metrics
* Central config
* Monitoring tools

[Daily Open-Source @dailyfoss]

BunkerWeb

Security-focused web server based on NGINX that applies automated security rules to protect against common web attacks and simplify server hardening for self-hosted deployments

⭐ Stars: ~10.0k
🧾 License: AGPL-3.0

🔔 Discover Open Source. Every Day

[BBWriteup @bbwriteup]

"Post mortem: A love-hate story about a BunkerWeb misconfiguration" by David Garcia

#BugBounty #Cybersecurity #Hacking #InfoSec

https://t.co/V02uNL5Nna

[Guillaume Coqueblin @esquimo_2ooo]

@BlablaLinux Perso j'ai fait pareil avec bunkerweb en reverse, et les dns en local par pihole 😎

[Git Rated @GitRated]

A new AI review! bunkerity/bunkerweb ⭐4.0/5.0
BunkerWeb is a mature, feature-rich open-source Web Application Firewall and “secure-by-default” reverse proxy built on NGINX, with a strong operational focus: Docker/Swarm/Kubernetes/Linux ...
https://t.co/snsmxOST66

[Raffaele Chiatto @ReDevil2o0o]

Installazione e Configurazione Base di BunkerWeb su Ubuntu Server 24.04 https://t.co/3fKi1o266B

#bunkerweb #nginx #waf

[Bunkerity @bunkerity]

@PAPAMICA__ @anth_prs Merci pour la mention @PAPAMICA__ 🤓

[PAPAMICA @PAPAMICA__]

@anth_prs Je met actuellement des #Bunkerweb !

Très très satisfait pour le moment https://t.co/zBHcqM8jUf

[bfho @0xbfho]

boh starred bunkerity/bunkerweb on Github https://t.co/qeKPhqAVqk

[Bunkerity @bunkerity]

@tom_doerr Thank you for the mention @tom_doerr 🤗

[Tom Dörr @tom_doerr]

Web application firewall based on NGINX

https://t.co/0lDjrpnoCM

[IT-Connect.fr @ITConnect_fr]

Sécurisez vos services web avec BunkerWeb : reverse proxy et WAF open-source https://t.co/0ziUEDLOSS

[Immanuel @immanuel_vibe]

Nice demo, how BunkerWeb works

[Immanuel @immanuel_vibe]

🛡️ Just tried out BunkerWeb WAF — a next-gen open-source Web Application Firewall that slips in as a reverse proxy and makes your attack surface way smaller by default

It's not just a WAF — it's a full web server based on NGINX under the hood, so you can drop it in front of your apps and block OWASP Top-10 threats, bots, weird payloads, bad IPs & more before they hit your stack

Out-of-the-box HTTPS with auto Let's Encrypt, strict HTTP headers, TLS hardening, rate limits, and automatic banning of odd traffic patterns make reducing your attack surface almost effortless

The integrated ModSecurity engine + OWASP core ruleset gives you smart signature-based filtering — and you can inject your own rules when you need deep tuning

Plugin system + Web UI = extendable defense and easy ops. Want automatic Docker label-driven config updates? There's support for that too via autoconf

Some tips for BunkerWeb:
- tune rate limits and challenge bots (JS/cookie/captcha) before adding custom ModSecurity rules. That cuts noise and reduces false positives significantly

- use multisite mode + templated NGINX snippets to standardize security headers & edge filtering across services. Saves time and avoids misconfig drift.

Compared to older open WAFs, BunkerWeb bundles reverse-proxy + WAF + certs + bot challenges in one, so you don't have to stitch NGINX + ModSecurity + cert managers yourself.

It's not an ISP-scale DDoS shield — large-volume attacks still need edge networks or CDNs — but for app layer protection it's a solid self-hosted choice

And see the nice demo (in the comments), how BunkerWeb works, thanks @bunkerity

#waf #cybersecurity #letsencrypt #docker #nginx #kubernetes #security #devops

[NoLimitSecu @nolimitsecu]

#Podcast #Cybersécurité

Épisode #520 consacré au WAF Open Source "BunkerWeb", avec Florian PITANCE (@bunkerity )

https://t.co/ElwSlkHs7Y

[🔀 Acik Kau @acik_kau_lah]

@MaziyarPanahi @the_ryan_hughes @AnthropicAI @Google @OVHcloud https://t.co/UFSA5NVFjk Open Source and use it.

[@whiteluso @whiteluso2769]

@M_Solidus Arch, firefox+plugins, mullvad, tiddlywiki, keepassxc, nextcloud, webdav, bunkerweb, onlyoffice, thunderbird, and all i van selfhosted... Meaning all