ModSecurity is a web application firewall by Trustwave SpiderLabs. The project provides a module for several web servers (Apache , IIS , Nginx , and a Java servlet filter) with logging, monitoring and filtering features. The module implements a policy described as a set of rules. SpiderLabs provides an official, free set of rules (the Core Rule Set) and sells more. The related tool ModProfiler analyzes logs and can be used to produce rules.

Official links

history | show excerpt | excerpt history