Projects in Awesome Lists tagged with modsecurity

https://github.com/owasp-modsecurity/modsecurity

ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. It has a robust event-based programming language which provides protection from a range of attacks against web applications and allows for HTTP traffic monitoring, logging and real-time analysis.

apache apache2 modsecurity nginx waf

Last synced: 12 Dec 2025

https://github.com/owasp-modsecurity/ModSecurity

ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. It has a robust event-based programming language which provides protection from a range of attacks against web applications and allows for HTTP traffic monitoring, logging and real-time analysis.

apache apache2 modsecurity nginx waf

Last synced: 20 Mar 2025

https://github.com/bunkerity/bunkerweb

🛡️ Open-source and next-generation Web Application Firewall (WAF)

antibot bunkerized-nginx cybersecurity devops devsecops dnsbl docker hardening hosting kubernetes letsencrypt modsecurity nginx reverse-proxy security security-tuning swarm waf web-application-firewall web-security

Last synced: 23 Jan 2026

https://github.com/corazawaf/coraza

OWASP Coraza WAF is a golang modsecurity compatible web application firewall library

coraza coraza-waf coreruleset go golang hacktoberfest http modsecurity owasp owasp-crs waf web-application-firewall

Last synced: 14 May 2025

https://github.com/SpiderLabs/ModSecurity-nginx

ModSecurity v3 Nginx Connector

libmodsecurity modsecurity modsecurity-nginx nginx nginx-connector waf

Last synced: 20 Jun 2025

https://github.com/owasp-modsecurity/modsecurity-nginx

ModSecurity v3 Nginx Connector

libmodsecurity modsecurity modsecurity-nginx nginx nginx-connector waf

Last synced: 14 May 2025

https://github.com/owasp-modsecurity/ModSecurity-nginx

ModSecurity v3 Nginx Connector

libmodsecurity modsecurity modsecurity-nginx nginx nginx-connector waf

Last synced: 28 Mar 2025

https://github.com/add-sp/ngx_waf

Handy, High performance, ModSecurity compatible Nginx firewall module & 方便、高性能、兼容 ModSecurity 的 Nginx 防火墙模块

captcha hcaptcha modsecurity modsecurity-nginx nginx nginx-modules openresty recaptcha waf web-application-firewall

Last synced: 14 May 2025

https://github.com/ADD-SP/ngx_waf

Handy, High performance, ModSecurity compatible Nginx firewall module & 方便、高性能、兼容 ModSecurity 的 Nginx 防火墙模块

captcha hcaptcha modsecurity modsecurity-nginx nginx nginx-modules openresty recaptcha waf web-application-firewall

Last synced: 27 Mar 2025

https://github.com/p0pr0ck5/lua-resty-waf

High-performance WAF built on the OpenResty stack

lua lua-resty-waf modsecurity nginx-lua openresty waf

Last synced: 25 Oct 2025

https://github.com/safe3/uuwaf

An industry-leading free, high-performance, AI and semantic technology Web Application Firewall and API Security Gateway (WAAP) - UUSEC WAF.

api-gateway api-security application-security data-mask ddos hips modsecurity nginx owasp rasp security sql-injection uusec uusec-waf uuwaf waap waf web-application-firewall web-security-gateway xss

Last synced: 18 Jun 2025

https://github.com/Jsitech/JShielder

Hardening Script for Linux Servers/ Secure LAMP-LEMP Deployer/ CIS Benchmark

centos7 cis-benchmark hardening hardening-steps iptables lamp-deployer lamp-stack lemp-deployer linux linux-server modsecurity security-hardening system-hardening ubuntu-server ubuntu1604 ubuntu1804

Last synced: 12 Apr 2025

https://github.com/coreruleset/modsecurity-crs-docker

Official ModSecurity Docker + Core Rule Set (CRS) images

core-rule-set docker modsecurity modsecurity-core-rule-set

Last synced: 04 Feb 2026

https://github.com/casbin/caswaf

HTTP & OAuth Gateway and Web Application Firewall (WAF) based on ModSecurity, online demo: https://door.caswaf.com

firewall gateway http modsecurity modsecurity-core-rule-set oauth proxy waf web-application-firewall

Last synced: 29 Jan 2026

https://github.com/acouvreur/traefik-modsecurity-plugin

Traefik plugin to proxy requests to owasp/modsecurity-crs:apache container

container docker modsecurity owasp proxy reverse-proxy traefik traefik-plugin waf

Last synced: 05 Apr 2025

https://github.com/hwdsl2/setup-ghost-blog

Script to install your own Ghost blog, with Nginx and ModSecurity/Naxsi web application firewall. Supports multiple blogs.

blog ghost ghost-blog javascript modsecurity naxsi nginx node nodejs wordpress

Last synced: 22 Jul 2025

https://github.com/aapanel/aawaf

堡塔云WAF，宝塔免费(free)的私有云网站应用防火墙(firewall)，基于docker/nginx/lua开发

acl captcha cc-attack ddos ddos-attacks ddos-defense ddos-protection docker firewall http-flood modsecurity nginx security security-tools sqli-injection waf web-application-firewall web-security xss

Last synced: 07 Apr 2025

https://github.com/coreruleset/modsecurity-docker

The official ModSecurity Docker images

docker modsecurity

Last synced: 25 Mar 2025

https://github.com/coreruleset/ftw

Framework for Testing WAFs (FTW!)

modsecurity owasp security-tools waf

Last synced: 04 Feb 2026

https://github.com/corazawaf/coraza-proxy-wasm

proxy-wasm filter based on Coraza WAF

coraza-waf coreruleset hacktoberfest modsecurity proxy-wasm waf wasm

Last synced: 04 Apr 2025

https://github.com/bitsofinfo/logstash-modsecurity

Logstash configuration filter set framework to parse modsecurity audit logs

logstash modsecurity modsecurity-audit-logs waf

Last synced: 13 Apr 2025

https://github.com/jcmoraisjr/modsecurity-spoa

HAProxy agent for ModSecurity web application firewall

haproxy modsecurity

Last synced: 13 Mar 2025

https://github.com/bbva/waf-brain

Machine Learning WAF Based

machine-learning modsecurity owasp waf

Last synced: 21 Jun 2025

https://github.com/owasp-modsecurity/modsecurity-apache

ModSecurity v3 Apache Connector

apache apache2 libmodsecurity modsecurity waf

Last synced: 30 Aug 2025

https://github.com/edgio/waflz

multitenant ModSecurity compatible WAF engine from Edgio

modsecurity waf

Last synced: 02 Aug 2025

https://github.com/aapanel/bt-waf

堡塔云WAF，宝塔免费(free)的私有云网站应用防火墙(firewall)，基于docker/nginx/lua开发

acl captcha cc-attack ddos ddos-attacks ddos-defense ddos-protection docker firewall http-flood modsecurity nginx security security-tools sqli-injection waf web-application-firewall web-security xss

Last synced: 31 Mar 2025

https://github.com/pymodsecurity/pymodsecurity

Python Bindings for ModSecurity v3

bindings modsecurity python python3 security

Last synced: 12 Dec 2025

https://github.com/molu8bits/modsecurity-parser

modsecurity audit log analyser and parser

analyser analyzer charts graphs modsec-audit modsecurity modsecurity-audit-logs modsecurity-parser modsecurity3-log molu8bits parser

Last synced: 16 Mar 2025

https://github.com/defanator/modsecurity-performance

Vagrant-based configurations intended for ModSecurity performance testing

benchmarking benchmarks modsecurity nginx performance performance-testing

Last synced: 21 Mar 2025

https://github.com/phusion/nginx-modsecurity-ubuntu

Ubuntu package for modsecurity-nginx

modsecurity nginx security ubuntu

Last synced: 11 Jun 2025

https://github.com/reallyreally/docker-nginx-modsecurity

nginx with ModSecurity (and certbot)

certbot lua modsecurity nginx

Last synced: 15 Jul 2025

https://github.com/pymodsecurity/django-pymodsecurity

ModSecurity Django middleware

django middleware modsecurity security

Last synced: 01 Sep 2025

https://github.com/volkansah/modsecurity-webserver-protection-guide

A full Mod_Security guide to use local software like clam-av, chkrootkit, fail2ban, rkhunter for Nginx & Apache

apache-configuration apache2 arch-linux bsd chkrootkit clamav configuration debian fail2ban modsecurity modsecurity-nginx nginx nginx-configuration rkhunter source-code ubuntu use-modsecurity

Last synced: 12 Apr 2025

https://github.com/vshn/modsecurity-docker

A custom Docker image based on the official ModSecurity image.

docker modsecurity modsecurity-core-rule-set vshn-project-ignore

Last synced: 30 Jun 2025

https://github.com/madebymode/traefik-modsecurity-plugin

Traefik plugin to proxy requests to owasp/modsecurity-crs:4.3.0-apache-alpine

docker modsecurity modsecurity-nginx owasp owasp-crs traefik traefik-plugin

Last synced: 30 Jan 2026

https://github.com/m4tteop/minimal-modsec-istio-ext-wasm

Minial ModSecurity WAF as WASM Envoy extension inside a Istio Service Mesh

envoy istio istio-sidecar modsecurity waf webassembly

Last synced: 14 Apr 2025

https://github.com/xeraa/mod_security-log

Fighting SQL injections and insufficient logging

elasticsearch filebeat kibana modsecurity

Last synced: 11 Apr 2025

https://github.com/esadcetiner/roundcube-rule-exclusions-plugin

OWASP CRS 3rd party plugin for Roundcube webmail

coraza-waf coreruleset coreruleset-plugin crs-plugin modsecurity roundcube-webmail

Last synced: 09 Feb 2026

https://github.com/wishtack/modsecurity-exception-factory

👴🏻 The only tool that parses your ModSecurity audit logs to generate exceptions automagically ;)

infosec legacy modsecurity waf

Last synced: 30 Jul 2025

https://github.com/vshn/waf-tool

Helper tool to generate ModSecurity rule exclusions

modsecurity tuning vshn-project-ignore

Last synced: 24 Jul 2025

https://github.com/teebow1e/loganalyz3r

LogAnalyz3r is a Java application for log analysis and visualization, specifically tailored for logs generated by Apache, Nginx, and ModSecurity.

gui httpd iptables java log log-analysis log-analyzer log-parser log-viewer malicious-traffic modsecurity nginx

Last synced: 07 Feb 2026

https://github.com/anonvm/nginx-installer

Automate NGINX Compilation from Source with Custom Modules and Patches on Debian & Ubuntu

bot brotli cache cloudflare firewall geolocation http http2 https lua modsecurity nginx pagespeed proxy redis rtmp tengine waf

Last synced: 10 Apr 2025

https://github.com/cristianzsh/modsecurity-to-es-parser

A script to send ModSecurity logs to Elasticsearch

elasticsearch kibana logs modsecurity owasp owasp-top-10 parser python security

Last synced: 27 Sep 2025

https://github.com/johackim/ansible-personal

My personal ansible playbook for debian

ansible ansible-playbook debian docker dokku fail2ban hardening iptables modsecurity security ssh

Last synced: 22 Mar 2025

https://github.com/sjinks/node-modsecurity

ModSecurity Connector for Node.js

modsec modsecurity security waf

Last synced: 10 Apr 2025

https://github.com/molu8bits/modsecurity-filebeat-kibana

Filebeat module for Modsecurity2 modsec_audit.log + Kibana dashboards. ELK 7.x

dashboard elasticsearch filebeat kibana modsecurity

Last synced: 16 Mar 2025

https://github.com/wandapeter/hardened-ubuntu-server-dokku

🐋 hardened ubuntu server dokku | This repository contains scripts, configuration templates, and documentation used for the initial setup of a hardened Ubuntu 22.04 LTS server using the Dokku service to host websites in a secure production environment.

aide certbot cis-benchmark cis-level2 devops docker hardened hosting modsecurity modsecurity-nginx nginx security ubuntu-server vps

Last synced: 24 Jun 2025

https://github.com/Zeerg/modsecurity-layer

A ModSecurity Lambda Layer for AWS

aws lambda modsecurity security serverless-framework

Last synced: 31 Mar 2025

https://github.com/marknjunge/docker-nginx-modsecurity

NGINX set up with ModSecurity enabled and configured with Open Web Application Security Project Core Rule Set (OWASP CRS). All running on docker.

docker modsecurity modsecurity-nginx nginx nginx-docker owasp owasp-crs-core-rule-set

Last synced: 09 Aug 2025

https://github.com/esadcetiner/sogo-rule-exclusions-plugin

OWASP CRS 3rd party plugin for SOGo Groupware

coraza-waf coreruleset coreruleset-plugin crs-plugin modsecurity sogo

Last synced: 20 Nov 2025

https://github.com/va1da5/modsecurity-crs-rule-tuning

Practice exercises to enhance skills in tuning OWASP ModSecurity core rule set rules and implementing your own rules.

modsecurity modsecurity-core-rule-set pytest

Last synced: 09 Nov 2025

https://github.com/esadcetiner/plausible-rule-exclusions-plugin

OWASP CRS 3rd party plugin for Plausible Analytics

coraza-waf coreruleset coreruleset-plugin crs-plugin modsecurity plausible-analytics

Last synced: 26 Jan 2026

https://github.com/jul10l1r4/modsec-vulneravel

Nginx + Modsecurity + Má configuração = Nego invadindo

docker-image modsecurity vulnerable xss-poc

Last synced: 14 Mar 2025

https://github.com/djellemah/rodsec

ruby ffi for ModSecurity and rack middleware

modsecurity rack rack-middleware rails ruby

Last synced: 06 Jul 2025

https://github.com/functionofpwnosec/pwnwaf

PwnWAF 🛡️ Open-source and next-generation Web Application Firewall (WAF)

antibot cybersecurity devops devsecops letsencrypt modsecurity reverse-proxy security security-vulnerability vulnerability waf web-application-firewall web-security

Last synced: 29 Jul 2025

https://github.com/infernovm/nginx-installer

Automate NGINX compilation from source with custom modules, patches & optimizations for Debian & Ubuntu. Easily install, configure & upgrade NGINX with support for Brotli, HTTP/3, TLS 1.3, ModSecurity, and more. Boost performance, security & flexibility!

bot brotli cache cloudflare firewall geolocation http http2 https lua modsecurity nginx pagespeed proxy redis rtmp tengine waf

Last synced: 22 Feb 2025

https://github.com/esadcetiner/iredadmin-rule-exclusions-plugin

OWASP CRS 3rd party plugin for iRedAdmin

coraza-waf coreruleset coreruleset-plugin crs-plugin iredadmin iredmail modsecurity

Last synced: 26 Feb 2025

https://github.com/cybervarun/webserver-config

Web Server Config files

apache2 apache2-webserver modsecurity nginx nginx-conf nginx-configuration server server-security

Last synced: 12 Jun 2025

https://github.com/liberatti/nproxy

Web Proxy solution for APIs using OpenResty and ModSecurity

coreruleset modsecurity modsecurity-core-rule-set modsecurity-nginx nginx-proxy-pass openresty

Last synced: 05 Feb 2026

https://github.com/xjonathanlei/nginx-modsecurity-docker

Docker Image for Nginx with ModSecurity

docker modsecurity nginx waf

Last synced: 01 Dec 2025

https://github.com/smalls1652/waf-rules

My web application firewall rules for ModSecurity. (Mirror)

modsecurity waf web-application-firewall

Last synced: 01 Feb 2026

https://github.com/spithash/modsecurity-trusted-bot-ips

A Bash script that automatically fetches and parses JSON-based IP range data for trusted search engine bots (Googlebot, Bingbot, and others), ideal for use with ModSecurity and other web application firewalls and web servers.

apache bash bingbot googlebot ip-ranges modsecurity nginx security waf web-application-firewall

Last synced: 02 Jul 2025

https://github.com/dre1080/docker-bedrock

Docker Image for Bedrock WP Projects (contains PHP, Apache)

apache bedrock docker modsecurity modsecurity-core-rule-set php wordpress

Last synced: 09 Nov 2025

https://github.com/casbin/caswaf.github.io

The GitHub pages (static site) for: https://github.com/casbin/caswaf-website

casbin caswaf modsecurity waf

Last synced: 15 Nov 2025

https://github.com/luckyfoxdesign/docker-nginx-http

A production-ready secure HTTP Nginx setup with Docker featuring ModSecurity WAF, rate limiting, security headers, and token-based authentication. Designed for secure API gateway deployments with minimal configuration required.

api-gateway containerization devops docker docker-compose infrastructure-as-code modsecurity nginx rate-limiting reverse-proxy security waf web-security