# BunkerWeb privacy rating

Open-source web application firewall (WAF) built on NGINX that sits in front of web services as a reverse proxy and blocks common attacks, with secure defaults.

## Summary

BunkerWeb scores 50 out of 100 (grade D) on the firewalls criteria. It meets 2 of 4 criteria: open source and no ads or data sales. It does not meet no trackers or telemetry and independent audit. It is based in France: Nine Eyes member; EU member (GDPR).

- Website: https://www.bunkerweb.io
- Source code: https://github.com/bunkerity/bunkerweb
- License: AGPL-3.0
- Jurisdiction: France. Nine Eyes member. EU member (GDPR).
- Home page trackers: Google reCAPTCHA (not scored)
- Category: [Firewalls](https://privacyratings.com/firewalls/)
- Grade: D (50/100)

## Criteria

| Criterion | Answer | Note | Evidence |
| --- | --- | --- | --- |
| Open source | Yes | AGPL-3.0. | https://github.com/bunkerity/bunkerweb/blob/master/LICENSE.md |
| No trackers or telemetry | No | The website loads the Brevo marketing SDK and Google reCAPTCHA, and the software sends anonymous usage reports by default. | https://docs.bunkerweb.io/latest/features/ |
| No ads or data sales | Yes | Funded by paid PRO and Enterprise plans, with no ads. | https://www.bunkerweb.io/pricing-plan/ |
| Independent audit | No | No independent audit is published. |  |

Source: https://privacyratings.com/firewalls/bunkerweb/
Edit: https://github.com/privacyratings/privacyratings.com/edit/main/ratings/firewalls/bunkerweb.md