BunkerWeb vs LocalXpose
BunkerWeb
bunkerweb.ioLocalXpose
localxpose.ioSide by side
| Figure | BunkerWeb | LocalXpose |
|---|---|---|
| Price from | Free | $8/mo |
| Free plan | Yes | Yes |
| Free trial | Yes | — |
| Open source | — | — |
| Web | Yes | Yes |
| Windows | — | Yes |
| macOS | — | Yes |
| Linux | Yes | Yes |
| API | Yes | — |
| Self-hosted | Yes | Yes |
| Plans published | 2 | 3 |
| Spec score · Reverse Proxy Software | 8.2 (#11) | 8.3 (#7) |
| Security | Core protections include HTTPS with automated Let's Encrypt, HTTP security headers, TLS hardening, ModSecurity with the OWASP Core Rule Set, and automatic bans for suspicious behavior. | The maker says tunnel hosts terminate at its edge with TLS 1.2+ encryption and scoped access tokens; users can configure IP allow lists and authentication plugins. |
| Support | Free community support is available through Discord, GitHub Discussions, Reddit, Server Fault, and Super User; professional support and consulting are also offered. | The maker says self-serve teams can get help by email, while business and enterprise plans add priority ticketing, 24/7 incident response, and migration assistance. |
Plans
In their own words
BunkerWeb
BunkerWeb is an open-source web application firewall and NGINX-based server that protects web services as a reverse proxy. Its core protections include HTTPS with automated Let's Encrypt, HTTP security headers, TLS hardening, ModSecurity with the OWASP Core Rule Set and automatic bans for suspicious behavior. It can block known malicious IPs through external blacklists and DNS-based blackhole lists. Bot challenges can use cookies, JavaScript, CAPTCHA, hCaptcha, reCAPTCHA or Turnstile. Supported deployment integrations include Docker, Docker autoconf, Swarm, Kubernetes and Linux. An optional web UI manages instances and configurations, though it is currently supported with Docker and Linux integrations. The open-source plan costs nothing under the AGPLv3 license. A PRO version has pricing based on the number of protected services; Standard has no technical support, while Enterprise includes dedicated technical support. Kubernetes Gateway API mode is in beta. For API access, the documentation recommends an IP whitelist and optionally an API token. Free community support is available through Discord, GitHub Discussions, Reddit, Server Fault and Super User; professional support and consulting are also offered.
LocalXpose
LocalXpose is a reverse proxy for making services on a local machine reachable from the public internet through tunnels. It supports HTTP and HTTPS, including WebSockets, alongside TCP, TLS, and UDP. Users can work through a command-line interface or graphical interfaces, including a desktop app for sharing previews. The product includes authentication, rate limiting, IP whitelisting, header editing, and a built-in file server on all plans. Traffic logs cover HTTP, TCP, and UDP, and webhook payloads can be inspected, modified, and replayed. Custom and wildcard domains and automatic Let's Encrypt certificates for custom domains are available. The maker says tunnel hosts terminate at its edge with TLS 1.2+ encryption; users can configure scoped access tokens, IP allow lists, and authentication plugins. Starter is free and allows two active HTTP or HTTPS tunnels, with time limits and an interstitial warning page. PRO costs $8 a month, billed annually at $96/yr, and supports 10 tunnels. LocalXpose runs on Linux, macOS, Windows, web, and self-hosted environments.