How to: Security features
A non-exhaustive list of security features:

- **HTTPS** support with transparent **Let's Encrypt** automation
- **State-of-the-art web security**: HTTP security headers, prevent leaks, TLS hardening, ...
- Integrated **ModSecurity WAF** with the **OWASP Core Rule Set**
- **Automatic ban** of strange behaviors based on HTTP status codes
- Apply **connection and request limits** for clients
- **Block bots** by asking them to solve a **challenge** (e.g., cookie, JavaScript, captcha, hCaptcha, or reCAPTCHA)
- **Block known bad IPs** with external blacklists and DNSBL
- And much more...

Learn more about the core security features in the [security tuning](https://docs.bunkerweb.io/1.6.7/advanced/?utm_campaign=self&utm_source=github#security-tuning) section of the documentation.