ModSecurity
Open-source web application firewall engine, with a C++ library that web server connectors call for each request.
modsecurity.org/repositorydocs
ModSecurity is an open-source web application firewall engine, written in C++, that inspects HTTP traffic against rules written in its SecRules language. Version 3 is a standalone library that web server connectors call for each request, and the project maintains its NGINX and Apache connectors in separate repositories. Version 2 is the classic Apache module, which is also packaged for IIS. The library builds from source with autotools, and the README also describes a Windows build.
Worth knowing
Two engine generations are maintained side by side. The project is maintained by OWASP after a commercial sponsor ended its support.
Identity
- Status
- Active
- Maintainer
- OWASP Foundation1
- Maintained by
- Foundation
- First release
- 20027
Rendering and deploy
- Install with
- autotools source build of libmodsecurity4
Releases
Adoption
Sources
- 2026-10-30: links, Maintainer, License model
modsecurity.org/ - 2026-10-30: links, Written in, GitHub stars
github.com/owasp-modsecurity/ModSecurity - 2026-10-30: links, Categories
modsecurity.org/docs/ - 2026-10-30: Runtime, Install with
github.com/owasp-modsecurity/ModSecurity/blob/v3/master/README.md - 2026-10-30: License
github.com/owasp-modsecurity/ModSecurity/blob/v3/master/LICENSE - 2026-10-30: Current major version, Last release
github.com/owasp-modsecurity/ModSecurity/releases/tag/v3.0.17 - 2026-10-30: First release
modsecurity.org/history/ - 2026-10-30: Contributors
api.github.com/repos/owasp-modsecurity/ModSecurity/contributors?per_page=1