Tag info

ModSecurity is a web application firewall by Trustwave SpiderLabs. The project provides a module for several web servers (Apache apache, IIS iis, Nginx nginx, and a Java java servlet filter) with logging, monitoring and filtering features. The module implements a policy described as a set of rules. SpiderLabs provides an official, free set of rules (the Core Rule Set) and sells more. The related tool ModProfiler analyzes logs and can be used to produce rules.

Official links

• Home page
• FAQ
• Documentation entry point
• Reference manual
• GitHub project page