bnkty

6 ms·

1.
Show HN: BunkerWeb – Open-Source Web Application Firewall (WAF / WAAP)(github.com)
4 points by bnkty 24d ago|1 comments
2.
Show HN: BunkerWeb – open-source and cloud-native WAF/WAAP(bunkerweb.io)
3 points by bnkty 8mo ago|0 comments
3.
by bnkty 1y ago
Custom nginx configs are supported (more info here : https://docs.bunkerweb.io/latest/advanced/#custom-configurat... ) but BunkerWeb also includes its own list of settings.
4.
by bnkty 1y ago
Caddy does not offer full application protection besides HTTPS and basic stuff.
5.
by bnkty 1y ago
Features with a crown icon are PRO, you will find full list of free and PRO features here : https://docs.bunkerweb.io/latest/features/
6.
by bnkty 1y ago
Thanks for the kind words! Kubernetes integration is really awesome, you can use BunkerWeb ingress controller or mix it with an existing ingress controller.
7.
by bnkty 1y ago
ModSecurity doesn't offer antibot, bad behavior, certificate management, ... You can find the full list of features here : https://docs.bunkerweb.io/latest/features/
8.
Show HN: BunkerWeb – the open-source and cloud-native WAF(docs.bunkerweb.io)
106 points by bnkty 1y ago|31 comments
9.
Show HN: BunkerWeb – the open-source Web Application Firewall(docs.bunkerweb.io)
3 points by bnkty 2y ago|0 comments
10.
by bnkty 2y ago
You will need to migrate to BunkerWeb. But since BunkerWeb is based on NGINX it might be easier than you think. As an example, it supports custom NGINX configs : https://docs.bunkerweb.io/latest/quickstart-guide/#c
11.
by bnkty 2y ago
You are right, this is an open-core model. The PRO features are proprietary and, to be precise, they are actually modules that integrate into the core of the solution. In addition to these features, the PRO version gives you access to techn
12.
by bnkty 2y ago
Performance will indeed decrease compared to a web server without security features. However, this largely depends on the BunkerWeb features you choose to enable.
13.
by bnkty 2y ago
Indeed, we use NGINX as the base web server. NGINX + LUA to be precise.
14.
by bnkty 2y ago
Not at the moment but we plan to work on it. Thanks for your feedback.
15.
by bnkty 2y ago
The BunkerNet feature is completely optional. You can disable it at any time, however, you will not be able to take advantage of crowdsourcing on threats if you do so. More information here : https://docs.bunkerweb.io/latest
16.
by bnkty 2y ago
Yes you can configure your own CSP, more info here : https://docs.bunkerweb.io/latest/security-tuning/#security-h... Please note that we plan to improve it in the future with automation.
17.
by bnkty 2y ago
You can use BunkerWeb to protect your own SaaS against malicious actors.
18.
Show HN: BunkerWeb – The Open-Source Web Application Firewall (WAF)(github.com)
120 points by bnkty 2y ago|30 comments
19.
OwlCub – your virtual assistant in Cybersecurity(owlcub.com)
1 points by bnkty 2y ago|0 comments
20.
by bnkty 2y ago
That's awesome, thanks for sharing. We will have a look at it for sure.
21.
Show HN: BunkerWeb – Make your web services secure by default(github.com)
10 points by bnkty 2y ago|2 comments
22.
Show HN: BunkerWeb – The open-source and next-gen Web Application Firewall (WAF)(docs.bunkerweb.io)
2 points by bnkty 2y ago|0 comments
23.
by bnkty 3y ago
(BW maintainers here) Thanks for sharing BW on HN !
24.
by bnkty 3y ago
(BW maintainers here) We try our best to fix critical bugs and enhance the user experience. I can tell you that BW is running in production for both homelabs and enterprise.
25.
by bnkty 3y ago
(BW maintainers here) ModSecurity is just one security feature included into BW, you can find the full list here : https://docs.bunkerweb.io/latest/security-tuning/ Btw we also have plugins (e.g. coraza) as descri