Skip to content

Getting Started


Before anything else, make sure Bulwark has been installed.


Bulwark is an Envoy external processor. It needs to be used with Envoy to function. Future roadmap plans include support for other deployment patterns for request processing. The deployment guide covers setting up Envoy to use Bulwark.


Bulwark relies on WebAssembly plugins to perform all of its detection logic. You will need a collection of plugins to power Bulwark’s detection capabilities. You can use thecommunity ruleset to get started. Or, see the tutorial on writing your first plugin to supply your own.


Bulwark’s configuration file determines which plugins are loaded, from where, and on which paths those plugins will be applied.