BunkerWeb is a next-generation and open-source Web Application Firewall (WAF).
Open Source Wordfence AlternativesWeb Application Firewalls and other similar apps like Wordfence
The best open source alternative to Wordfence is BunkerWeb. If that doesn't suit you, our users have ranked more than 25 alternatives to Wordfence and 13 is open source so hopefully you can find a suitable replacement. Other interesting open source alternatives to Wordfence are SafeLine, coraza, All In One WP Security and Firewall and NinjaFirewall (WP Edition).
Alternatives list
- 58 BunkerWeb alternatives
- 22 SafeLine alternatives
SafeLine is a docker-based, easy to use, self-hosted free web application firewall (WAF) that protects web apps by filtering and monitoring HTTP traffic between a web application and the Internet.


+5
Coraza is an open source, enterprise-grade, high performance Web Application Firewall (WAF) ready to protect your beloved applications. It is written in Go, supports ModSecurity SecLang rulesets and is 100% compatible with the OWASP Core Rule Set v4.
Cost / License
- Free
- Open Source (Apache-2.0)
Application type
Platforms
- Self-Hosted
- Go (Programming Language)

The All In One WordPress Security and Firewall is the ultimate security plugin that will take your website’s security to a whole new level.
Cost / License
- Free
- Open Source
Platforms
- Self-Hosted
- Wordpress


NinjaFirewall (WP Edition) is a true Web Application Firewall. Although it can be installed and configured just like a plugin, it is a stand-alone firewall that sits in front of WordPress.
The most advanced and easy-to-use WordPress security plugin. Combines elegant and powerful features to block brute force attacks, facilitate multi-factor user authentication, and block malicious requests to WordPress sites. And much more besides.
This plugin improve login security, create a blacklist of IP addresses and reports brute force login attempts attacks.
Cost / License
- Free
- Open Source
Platforms
- Linux
- Wordpress


Hide My WP Ghost is a WordPress Security plugin. Changes and hides WordPress common paths for the Best WP Security against hacker’s bots.
The plugin works like security through obscurity solution for a WP website.
Cost / License
- Free
- Open Source
Platforms
- Online
- Software as a Service (SaaS)
- Wordpress


+2
No. 1 Plugin for cleaning up hacked websites. Trusted by web-security agencies to eliminate even the most challenging infections. It scans your WordPress files and database for malware, infections, malicious redirects and other vulnerabilities.
Cost / License
- Free
- Open Source
Platforms
- Self-Hosted
- Wordpress

Analyse and protect your WordPress site daily with our security plugin SecuPress. Purchase the premium version now!
Cost / License
- Paid
- Open Source
Platforms
- Online
- Wordpress
WPScan is a free, for non-commercial use, black box WordPress security scanner written for security professionals and blog maintainers to test the security of their sites.
Cost / License
- Freemium
- Open Source
Platforms
- Self-Hosted
- Wordpress



Limit Attempts plugin is a security solution for WordPress which protects your website from spam and brute-force attacks. Limit the number of failed login attempts per user and block user IP for a certain period of time based on your settings.
Cost / License
- Freemium
- Open Source (GPL-3.0)
Platforms
- Wordpress


+9




































