ModSecurity

Loading the README

About

ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. It has a robust event-based programming language which provides protection from a range of attacks against web applications and allows for HTTP traffic monitoring, logging and real-time analysis.

C++Web application firewallsApache-2.0

Owner: OWASP ModSecurity organisation
Stars: 9.8k
Forks: 1.8k
Latest: v3.0.17
Last push: 2026-10-03
Terms: Open source
Self-hosted: Yes
Created: 2011, 15 years ago
Release cadence: about 33 days between releases
Active contributors: 2 commit authors on the default branch in the last 90 days

Read from GitHub on 2026-10-06.Entry last edited on 2026-10-06.

Compare ModSecurity and Anubis →

#apache#apache2#modsecurity#nginx#waf

github.com/owasp-modsecurity/ModSecurity ↗Website ↗Edit this entry Changes to ModSecurity (RSS)

ModSecurity

Other tools in Web application firewalls