BunkerWeb

A web application firewall and reverse proxy that places a security layer in front of your web services. BunkerWeb is built on NGINX and adds ModSecurity with the OWASP Core Rule Set, automatic Let's Encrypt certificates, security headers, TLS hardening, rate limits, bot challenges and IP blocklists from DNSBL feeds, all driven by environment variables with a web interface for review.

Teams put it in front of applications and APIs to cover the OWASP Top 10 without changing the apps themselves.

Self-hosting means the traffic metadata and the rules governing it are managed inside your perimeter, the configuration is auditable, and no request-based pricing applies.