ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx that is developed by Trustwave's SpiderLabs. It has a robust event-based programming language which provides protection from a range of attacks against web applications and allows for HTTP traffic monitoring, logging and real-time analysis. With over 10,000 deployments world-wide, ModSecurity is the most widely deployed WAF in existence.

nginx Docker image secure by default.

High-performance WAF built on the OpenResty stack

ModSecurity v3 Nginx Connector

Hardening Script for Linux Servers/ Secure LAMP-LEMP Deployer/ CIS Benchmark

🔥 A curated list of awesome links related to application security related to the environments with NGINX or Kubernetes Ingres Controller (based on NGINX)

An NGINX and ModSecurity based Web Application Firewall for Docker

Script to install your own Ghost blog, with Nginx and ModSecurity/Naxsi web application firewall. Supports multiple blogs.

Logstash configuration filter set framework to parse modsecurity audit logs

Framework for Testing WAFs (FTW!)

ModSecurity v3 Apache Connector

The official ModSecurity Docker images

Web Application Firewall (WAF) on Kubernetes

Development repository for nginx-more package

multitenant ModSecurity compatible WAF engine from Verizon Digital Media Services

Machine Learning WAF Based

Python Bindings for ModSecurity v3

Collector

Implementation of ModSecurity, Core Rule Set (CRS) on Apache server. ModSecurity, sometimes called Modsec, is an open-source web application firewall. ModSecurity was installed and configured on an Ubuntu VM using Virtual Box

HAProxy agent for ModSecurity web application firewall

Dockerfile for Nginx with Modsecurity v3 and Brotli compression

modsecurity audit log analyser and parser

Official ModSecurity Docker + Core Rule Set (CRS) images

Vagrant-based configurations intended for ModSecurity performance testing

Ubuntu package for modsecurity-nginx

Scripts written by Steve Stonebraker for Administration

A Java Web Application with common legacy security flaws for tests with Arachni Scanner and ModSecurity

ModSecurity Django middleware

nginx with ModSecurity (and certbot)

docker modsecurity reverse proxy WAF based on nginx