www.modsecurity.org website

ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. It has a robust event-based programming language which provides protection from a range of attacks against web applications and allows for HTTP traffic monitoring, logging and real-time analysis.

ModSecurity Regression Test set

ModSecurity v3 Nginx Connector

Set of test cases that can be used to test custom implementations of the SecRules language (ModSecurity rules format).

Utility to manipulate SDBM files used by ModSecurity. With that utility it is possible to _shrink_ SDBM databases. It is also possible to list the SDBM contents with filters such as: expired or invalid items only.

ModSecurity v3 Apache Connector

Python bindings for libModSecurity (aka ModSecurity v3)