Robuta

ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. It has a robust event-based programming language...

Oct 10, 2024 - The below information is deprecated as HAProxy Enterprise now offers a fully functional native WAF module which supports whitelist-based rulesets, and more.

Open Source Web Application Firewall

Sep 24, 2023 - This Howto show how install ModSecurity to CENTOS WEB PANEL and configuring use Malware Expert - ModSecurity rules on CWP.

Sep 15, 2020 - We tested the rules for the past 24 hours on one of our shared web hosting servers and the rules are pretty much malware killer.

The OWASP ModSecurity team is pleased to announce the release of ModSecurity-nginx connector version 1.0.4. This version includes a mixture of new features and...

ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. It has a robust event-based programming language...

Jun 10, 2022 - Let’s take a look ☛ to see how the newly implemented ModSecurity rules would better protect you from malicious traffic and potential attacks.

After a long period, the modsecurity.org website is available again with renewed content and form.

Sep 10, 2023 - The Mod_Security rules from Malware Expert are based on intelligence gathered from real-world investigations, penetration tests and research.

Open Source Web Application Firewall

Sep 14, 2024 - Installing Downloading rules Login to My Account page: https://malware.expert/my-account/ Download Rules to local computer from Plesk Icon in My Subscriptions...

We would like to share our take on CVE-2025-52891, which was published on July 1, 2025.

What is ModSecurity? What are ModSecurity rules examples? Should I Use ModSecurity? Find out answers to these questions and many more in Imunify360 guide

We would like to share our take on CVE-2025-48866, which was published on June 2, 2025.

Mar 14, 2024 - ModSecurity Rules from Malware.Expert. Commercial ModSecurity Rules for shared webhosting use with ModSecurity or compatible Web Application Firewalls (WAF)

Open Source Web Application Firewall

We would like to share our take on CVE-2025-27110, which was published on February 25, 2025.

ModSecurity and NGINX: Tuning the OWASP Core Rule Set Play Video on YouTube

TL;DR both ModSecurity v2 and v3 share a similar bug that can result in a really simple WAF bypass. The bug in the v3 branch has been fixed in version 3.0.12...

ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. It has a robust event-based programming language...

Mar 14, 2024 - ModSecurity rules are based on intelligence gathered from real-world investigations, penetration tests and research data in the REAL LIFE environment. %

ModSecurity is the standard open-source web application firewall (WAF) engine.

ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. It has a robust event-based programming language...

Open Source Web Application Firewall

We would like to share our take on CVE-2025-54571, which was published on August 5, 2025.

It’s time to switch to using the PCRE library.

Nov 30, 2021 - You can install ModSecurity on your server using CloudPages

We would like to share our take on CVE-2024-46292, which was published on October 9 2024.

Mar 14, 2024 - The ModSecurity Rules from Malware Expert are based on intelligence gathered from real-world investigations, penetration tests and research.

The OWASP ModSecurity team is pleased to announce the release of versions 2.9.8 and 3.0.13. These versions both include a mixture of new features and bug fixes.

ModSecurity - Open source WAF. OWASP ModSecurity has 8 repositories available. Follow their code on GitHub.

We would like to share our take on CVE-2025-47947, which was published on May 21, 2025.

We strive to make the OWASP Modsecurity accessible to a wide audience of beginner and experienced users. We are interested in hearing any bug reports, false...

cross-site scripting

Frequently Asked Questions

Sep 10, 2023 - The ModSecurity Rules from Malware Expert are based on intelligence gathered from real-world investigations, penetration tests and research.

The landmark transfer of ModSecurity custodianship to OWASP promises to inject fresh energy and perspectives into this project. OWASP’s vast network of...

Open Source Web Application Firewall

ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. It has a robust event-based programming language...