compare
Anubis vs ModSecurity
The same facts for both, read from GitHub every night, and the relation a person reviewed.
| Fact | Anubis | ModSecurity |
|---|---|---|
| Language | Go | C++ |
| Licence | MIT | Apache-2.0 |
| Stars | 23k | 9.8k |
| Latest | v1.27.0 | v3.0.17 |
| Last push | 2026-10-05 | 2026-10-03 |
| Release cadence | too few releases | about 33 days between releases |
| Active contributors | 27 commit authors on the default branch in the last 90 days | 2 commit authors on the default branch in the last 90 days |
| Flags | none | none |
How they relate
Both replace Cloudflare WAF. Alternatives to Cloudflare WAF →
PartialAnubisOnly the bot challenge: a proof-of-work check in front of a site to keep scrapers out.
PartialModSecurityWAF engine for nginx, Apache and IIS on your own servers, used with a rule set such as the OWASP CRS.
Anubis
- v1.28.0-pre22026-09-17v1.28.0-pre2: Wuk Lamatpre-release
- v1.28.0-pre12026-08-30v1.28.0-pre1: Wuk Lamatpre-release
- v1.27.02026-08-08v1.27.0: Moenbryda Wilfsunnwyn
- v1.27.0-pre42026-08-07v1.27.0-pre4: Moenbryda Wilfsunnwynpre-release
- v1.27.0-pre32026-08-05v1.27.0-pre3: Moenbryda Wilfsunnwynpre-release
Anubis
unsigned The latest release, v1.27.0, carries no signature GitHub could verify.
Loading the security report
ModSecurity
✓ signed The latest release, v3.0.17, carries a signature GitHub verified.
Loading the security report