modsecurity

ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx that is developed by Trustwave's SpiderLabs. It has a robust event-based programming language which provides protection from a range of attacks against web applications and allows for HTTP traffic monitoring, logging and real-time analysis. With over 10,000 deployments world-wide, ModSecurity is the most widely deployed WAF in existence.

🛡️ Make your web services secure by default !

High-performance WAF built on the OpenResty stack

ModSecurity v3 Nginx Connector

Handy, High performance, ModSecurity compatible Nginx firewall module & 方便、高性能、兼容 ModSecurity 的 Nginx 防火墙模块

Hardening Script for Linux Servers/ Secure LAMP-LEMP Deployer/ CIS Benchmark

🔥 A curated list of awesome links related to application security related to the environments with NGINX or Kubernetes Ingres Controller (based on NGINX)

Coraza WAF is a golang modsecurity compatible web application firewall library

An NGINX and ModSecurity based Web Application Firewall for Docker

Script to install your own Ghost blog, with Nginx and ModSecurity/Naxsi web application firewall. Supports multiple blogs.

Logstash configuration filter set framework to parse modsecurity audit logs

Framework for Testing WAFs (FTW!)

The official ModSecurity Docker images

ModSecurity v3 Apache Connector

Development repository for nginx-more package

Machine Learning WAF Based

Web Application Firewall (WAF) on Kubernetes

multitenant ModSecurity compatible WAF engine from Edgecast

Python Bindings for ModSecurity v3

Official ModSecurity Docker + Core Rule Set (CRS) images

HAProxy agent for ModSecurity web application firewall

modsecurity audit log analyser and parser

Dockerfile for Nginx with Modsecurity v3 and Brotli compression

Implementation of ModSecurity, Core Rule Set (CRS) on Apache server. ModSecurity, sometimes called Modsec, is an open-source web application firewall. ModSecurity was installed and configured on an Ubuntu VM using Virtual Box

Vagrant-based configurations intended for ModSecurity performance testing

A web-based testing platform for WAF (Web Application Firewall)'s correctness

Ubuntu package for modsecurity-nginx

Scripts written by Steve Stonebraker for Administration

ModSecurity Django middleware

A Java Web Application with common legacy security flaws for tests with Arachni Scanner and ModSecurity