Official ModSecurity Docker + Core Rule Set (CRS) images

HTTP & OAuth Gateway and Web Application Firewall (WAF) based on ModSecurity, online demo: https://door.caswaf.com

Implementation of ModSecurity, Core Rule Set (CRS) on Apache server. ModSecurity, sometimes called Modsec, is an open-source web application firewall. ModSecurity was installed and configured on an Ubuntu VM using Virtual Box

NGINX reverse proxy using ModSecurity WAF to protect a web application

A custom Docker image based on the official ModSecurity image.

A CLI wrapper for libmodsecurity (v3.0.10)

Build and run a Docker container of ModSecurity WAF system on Kong API Gateway server which runs on the top of Nginx server

1 Minute WAF is a Web Application Firewall designed to provide robust security for web servers, Protecting against common web attacks: such as SQL injection, XSS, and more. It's an easy-to-install solution that focuses on delivering protection in just a minute!

Deploy DVWA Webserver + ModSecurity + Scanner for researching rules. Auto deployment scripts are supported

A LLM based rule management framework to design and develop good rules for your WAF

This project implements a machine learning-based Web Application Firewall (WAF) to enhance the security of web applications.

Docker file from nginx:alpine with ModSecurity (lib v3)

Ansible role for installing Nginx, compiling ModSecurity3, and configuring the OWASP CRS v3 ruleset

Securing docker web apps with your personal OpenID Connect based Single Sign-On provider, multi-factor authentication and a web app firewall

parsing modsecurity logfiles

Practice exercises to enhance skills in tuning OWASP ModSecurity core rule set rules and implementing your own rules.

This project demonstrates a full-stack user management dashboard built using React, Vite, TailwindCSS, Node.js, Express, and MongoDB, protected by a Web Application Firewall (WAF) using Apache2, ModSecurity, and the OWASP Core Rule Set (CRS).

Erlang NIF to talk to libmodsecurity3

Using WEB security module together with NGINX inside a container to facilitate the protection of the application, based on OWASP ModSecurity Core Rule Set rules to further improve protection.