Alternatives to F5 WAF for NGINX

Imperva API Security

It suits organizations managing APIs across cloud, on-premises, or hybrid environments, particularly teams needing discovery, testing, and runtime protection.

Gcore WAAP

WAAP is described for organizations in technology and SaaS, e-commerce, fintech, media and streaming, gaming, telecom, and managed security services.

Haltdos suits organizations protecting web applications and APIs across on-premise, cloud, or hybrid environments.

Oracle Cloud Infrastructure Secret Management

OCI Secret Management is aimed at application and cloud environment operators who need centrally managed credentials.

BunkerWeb

BunkerWeb suits teams that want a self-hosted reverse proxy with web application firewall protections.

Hide My WP Ghost

It suits WordPress freelancers, bloggers, small businesses, developers and agencies, with plans described for those groups.

SafeLine

SafeLine suits teams seeking a self-hosted firewall and reverse proxy for web applications, including users who need bot controls or rate limiting.

Security Ninja

Security Ninja suits WordPress site owners, freelancers, and agencies seeking security checks and login protections.

ModSecurity

ModSecurity suits administrators who want to inspect and control web traffic within an Apache, Nginx or IIS server.

OWASP Coraza WAF

It suits teams deploying an open-source WAF for APIs or web applications on Linux, macOS or self-hosted infrastructure.

It suits WordPress site owners who need firewall, scanning, login protection, and centralized management.