BunkerWeb vs Zrok
BunkerWeb and Zrok are both web servers software. BunkerWeb is open source under AGPL-3.0, with 11k GitHub stars. Zrok is open source under Apache-2.0, with 4.8k GitHub stars.
Which to pick
- Pick BunkerWeb when
- You self-host web apps on Docker or Kubernetes and want a WAF with sensible security defaults instead of hand-tuning ModSecurity.
- Pick Zrok when
- You need to expose a local service or folder to collaborators and want a self-hostable ngrok-style option built on OpenZiti.
Side by side
A web application firewall built on nginx and ModSecurity that sits in front of your sites as a reverse proxy, with bot protection, DNS blocklists and a web admin panel.
Shares local web services, TCP or UDP services and folders publicly or privately through a zero-trust overlay network, without opening firewall ports.
It is AGPL-licensed and some features are in the paid PRO edition.
Self-hosting means running OpenZiti infrastructure, and the free zrok.io service has usage limits.
Usable
Production-ready
Self-hosted server
Command line, cloud service and self-hosted server
Python, nginx, ModSecurity and Lua
Go, OpenZiti, PostgreSQL and TypeScript
Open source, AGPL-3.0 (network copyleft)
Open source, Apache-2.0 (permissive)
Use inside your business is unrestricted. If you change it and let customers use it over the internet, you must publish your changes.
You can build it into a product you sell, as long as you keep its copyright notice.
11k GitHub stars
4.8k GitHub stars
Established: started 7 years ago, latest release v1.6.17.
Established: started 4 years ago, latest release v2.0.9.
Other comparisons
More web servers and reverse proxies
Both sides were judged on 2026-11-06 from each project's README and GitHub data. License, age and popularity lines are worked out directly.