modsecurity

ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx that is developed by Trustwave's SpiderLabs. It has a robust event-based programming language which provides protection from a range of attacks against web applications and allows for HTTP traffic monitoring, logging and real-time analysis. With over 10,000 deployments world-wide, ModSecurity is the most widely deployed WAF in existence.

High-performance WAF built on the OpenResty stack

ModSecurity v3 Nginx Connector

Handy, High performance, ModSecurity compatible Nginx firewall module & 方便、高性能、兼容 ModSecurity 的 Nginx 防火墙模块

Hardening Script for Linux Servers/ Secure LAMP-LEMP Deployer/ CIS Benchmark

OWASP Coraza WAF is a golang modsecurity compatible web application firewall library

An NGINX and ModSecurity based Web Application Firewall for Docker

Script to install your own Ghost blog, with Nginx and ModSecurity/Naxsi web application firewall. Supports multiple blogs.

The official ModSecurity Docker images

Logstash configuration filter set framework to parse modsecurity audit logs

Framework for Testing WAFs (FTW!)

Development repository for nginx-more package

ModSecurity v3 Apache Connector

multitenant ModSecurity compatible WAF engine from Edgecast

Web Application Firewall (WAF) on Kubernetes

Machine Learning WAF Based

Official ModSecurity Docker + Core Rule Set (CRS) images

Python Bindings for ModSecurity v3

HAProxy agent for ModSecurity web application firewall

modsecurity audit log analyser and parser

Traefik plugin to proxy requests to owasp/modsecurity-crs:apache container

Dockerfile for Nginx with Modsecurity v3 and Brotli compression

Vagrant-based configurations intended for ModSecurity performance testing

Implementation of ModSecurity, Core Rule Set (CRS) on Apache server. ModSecurity, sometimes called Modsec, is an open-source web application firewall. ModSecurity was installed and configured on an Ubuntu VM using Virtual Box

Ubuntu package for modsecurity-nginx

A web-based testing platform for WAF (Web Application Firewall)'s correctness

Scripts written by Steve Stonebraker for Administration

ModSecurity Django middleware

A Java Web Application with common legacy security flaws for tests with Arachni Scanner and ModSecurity

docker modsecurity reverse proxy WAF based on nginx