Home.md

ModSecurity is an open source, cross platform web application firewall (WAF) developed by Trustwave's SpiderLabs. It has a robust event-based programming language which provides protection from a range of attacks against web applications and allows for HTTP traffic monitoring, logging and real-time analysis. With over 10,000 deployments world-wide, ModSecurity is the most widely deployed WAF in existence.

• [[Frequently Asked Questions | ModSecurity-Frequently-Asked-Questions-(FAQ)]]
• [[Getting Help | ModSecurity-Frequently-Asked-Questions-(FAQ)#where-do-i-get-more-help-on-modsecurity]]

📚 Documentation

• [[Installation from source | Compilation-recipes]]
• [[Reference Manual | Reference-Manual]]

• [[Introduction | Reference-Manual#Introduction]]
• [[Rule Sets (OWASP Core) | Reference-Manual#OWASP_ModSecurity_Core_Rule_Set_CRS_Project]]
• [[Installation Apache | Reference-Manual#Installation_for_Apache]]
• [[Configuration Apache | Reference-Manual#configure-modsecurity]]
• [[Installation Nginx | Reference-Manual#installation-for-nginx]]
• [[Configuration Nginx | Reference-Manual#configuration-steps]]
• [[Installation IIS | Reference-Manual#installation-for-microsoft-iis]]
• [[Configuration Reference | Reference-Manual#configuration-directives]]
• [[Recommended Base Configuration | Reference-Manual#a-recommended-base-configuration]]

• [[Log Data Format|ModSecurity-2-Data-Formats]]
• [[Tools]]
• [[Windows Troubleshooting | IIS-Troubleshooting]]

🚢 Development

• [[Roadmap]]
• [[Milestones | https://github.com/SpiderLabs/ModSecurity/milestones]]
• [[Debugging | Debugging-ModSecurity]]
• [[Distribution specific packaging | Package-Generation]]
• [[Ideas Google Summer of Code 2016 | Ideas-for-Google-Summer-of-Code-2016]]

---

ModSecurity 3

• [[Motivations & Goals | http://blog.zimmerle.org/2016/01/an-overview-of-upcoming-libmodsecurity.html]] (Blog Post)
• [[Overview of Changes | ModSecurity-version-3-(earlier-release-candidate-1)]]

Components

• [[libModSecurity | https://github.com/SpiderLabs/ModSecurity/tree/libmodsecurity]]
• [[Nginx Connector | https://github.com/SpiderLabs/ModSecurity-nginx]]
• [[Apache Connector | https://github.com/SpiderLabs/ModSecurity-apache]]
• [[Pcap Connector | https://github.com/SpiderLabs/ModSecurity-pcap]]
• [[Python Bindings | https://github.com/SpiderLabs/ModSecurity-Python-bindings]]