modsecurity

ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx that is developed by Trustwave's SpiderLabs. It has a robust event-based programming language which provides protection from a range of attacks against web applications and allows for HTTP traffic monitoring, logging and real-time analysis. With over 10,000 deployments world-wide, ModSecurity is the most widely deployed WAF in existence.

nginx Docker image secure by default.

High-performance WAF built on the OpenResty stack

ModSecurity v3 Nginx Connector

Hardening Script for Linux Servers/ Secure LAMP-LEMP Deployer/ CIS Benchmark

🔥 A curated list of awesome links related to application security related to the environments with NGINX or Kubernetes Ingres Controller (based on NGINX)

An NGINX and ModSecurity based Web Application Firewall for Docker

Script to install your own Ghost blog, with Nginx and ModSecurity/Naxsi web application firewall. Supports multiple blogs.

Coraza WAF is a golang modsecurity compatible web application firewall library

Logstash configuration filter set framework to parse modsecurity audit logs

Framework for Testing WAFs (FTW!)

The official ModSecurity Docker images

ModSecurity v3 Apache Connector

Development repository for nginx-more package

Web Application Firewall (WAF) on Kubernetes

Machine Learning WAF Based

multitenant ModSecurity compatible WAF engine from Verizon Digital Media Services

Python Bindings for ModSecurity v3

HAProxy agent for ModSecurity web application firewall

Official ModSecurity Docker + Core Rule Set (CRS) images

modsecurity audit log analyser and parser

Dockerfile for Nginx with Modsecurity v3 and Brotli compression

Implementation of ModSecurity, Core Rule Set (CRS) on Apache server. ModSecurity, sometimes called Modsec, is an open-source web application firewall. ModSecurity was installed and configured on an Ubuntu VM using Virtual Box

Vagrant-based configurations intended for ModSecurity performance testing

Ubuntu package for modsecurity-nginx

Scripts written by Steve Stonebraker for Administration

A web-based testing platform for WAF (Web Application Firewall)'s correctness

A Java Web Application with common legacy security flaws for tests with Arachni Scanner and ModSecurity

docker modsecurity reverse proxy WAF based on nginx

nginx with ModSecurity (and certbot)