Security & Compliance

ModSecurity

Open-source web application firewall (WAF).

Website Docs GitHub

ModSecurity is the most widely deployed WAF engine, supporting OWASP Core Rule Set (CRS) to block SQL injection, XSS, and other web attacks. Covers CRS tuning, custom rules, Nginx/Apache integration, and false-positive reduction.