bunkerweb-aio
BunkerWeb is a next-generation, open-source Web Application Firewall (WAF).
Platform availability
Available on 1 of 9 platforms
- Unraid
- TrueNAS (not listed)
- Umbrel (not listed)
- ZimaOS (not listed)
- Proxmox (not listed)
- Helm (not listed)
- Mac (not listed)
- Windows (not listed)
- Linux (not listed)
Health score?A 0-100 score computed nightly from four factors: maintained (40%: recent commits and steady activity), popular (25%: GitHub stars, log scale), easy to install (20%: platforms, install notes, setup guides, Docker image) and light to run (15%: minimum RAM, ARM support). When the source code has been checked, a fifth factor, security check (20%: automated scan for committed secrets, unsafe desktop-app settings, known-vulnerable dependencies and project hygiene; any serious finding caps it at 20), is added. Factors without data are left out and the rest are rescaled.
70/100 Good
- Maintained
- 100last commit 22 days ago
- Popular
- 8111,057 GitHub stars
- Easy to install
- 351 install platform, install notes, Docker image
- Light to run
- 208 GB minimum RAM, runs on ARM
Availability: platform listings confirmed today, links checked 4 days ago
- GitHub stars
- 11,057
- Open issues
- 188
- Last commit
- 2026-09-21
- Latest release
- v1.6.15
- License
- AGPL-3.0
- Activity
- declining
Checked 4 days ago - source: GitHub (bunkerity/bunkerweb)
Resources & Compatibility
Minimum requirements: 8 GB RAM, 2 CPU core(s). ARM (e.g. Raspberry Pi) is supported.
Checked 14 days ago - source: Docker Hub image tags and published docs
First-install notes
- Start your BunkerWeb containers Run docker compose up -d in your BunkerWeb folder to start the Docker containers (packaged parts of the app) in the background. If you skip this, BunkerWeb won’t be running and the web interface or sites will not load. source
Fetched 14 days ago - each note links to its source
Variants
Alternatives (12)
- Anubis - Anubis is a lightweight, self-hosted web firewall that weighs each incoming connection with a proof-of-work challenge before it reaches you…
- Apache HTTP Server - Open-source HTTP server offering cross-platform support, modular architecture, secure configuration, robust content delivery, and extensive…
- Caddy - Caddy is an extensible web server and reverse proxy that serves Transport Layer Security (TLS) by default, making it simple to secure and r…
- Cloudflare - Protects websites with front-end proxy, dynamic DNS, CDN, and firewall; blocks DDoS and targeted attacks, optimizes traffic, and analyzes t…
- FortiWeb Ingress Controller - FortiWeb Ingress Controller syncs Kubernetes Ingress resources with FortiWeb, automatically creating and updating Web Application Firewall…
- Fossorial Pangolin - Open-source identity-based remote access platform using WireGuard, offering unified management, tunneled connections, granular access contr…
- Haproxy - HAProxy is a TCP proxy and a HTTP reverse proxy.
- Nginx Proxy Manager - Nginx Proxy Manager is a self-hosted reverse proxy and web server that lets you expose home or small-office applications to the internet wi…
- SafeLine - SafeLine is a docker-based, easy to use, self-hosted free web application firewall (WAF) that protects web apps by filtering and monitoring…
- Træfik Proxy - The Cloud Native Application Proxy Simplify networking complexity while designing, deploying, and operating applications.
- defensia-agent
- nginx - Nginx is an HTTP web server, reverse proxy, content cache, load balancer, TCP/UDP proxy, and mail proxy server.
Checked 15 days ago - source: AlternativeTo
Common questions
What command starts the BunkerWeb Docker containers?
Run docker compose up -d in your BunkerWeb folder to start the Docker containers in the background. If you skip this, BunkerWeb will not be running and the web interface or sites will not load.
What services are included in the BunkerWeb AIO container?
The AIO container packages BunkerWeb, the Scheduler, the Web UI, and optionally the API service into a single container. It is managed by supervisord.
Does BunkerWeb work as a reverse proxy in existing environments?
Yes, it integrates into existing environments such as Linux, Docker, Swarm, and Kubernetes as a reverse proxy. It is fully configurable for those use cases.
Can BunkerWeb be extended beyond its core security features?
Yes, it can be extended with additional features through a plugin system. Security features are also included as part of the core.
Answers sourced from deepwiki.com, docs.bunkerweb.io, github.com
Community
- BunkerWeb - Reddit (reddit)
- Reverse Proxy, WAF, & CrowdSec options for 2024 : r/selfhosted - Reddit (reddit)
- What reverse proxy should I use? : r/selfhosted - Reddit (reddit)
- Reddit (reddit)
- r/selfhosted on Reddit: so i don't want to use cloud hosted WAF i was ... (reddit)
Collected 9 days ago - public community threads