All

51 repositories

coreruleset
Public
OWASP CRS (Official Repository)
security waf owasp
security waf owasp ruleset crs
Python
•
Apache License 2.0
•455•3.1k•70•29•Updated Apr 30, 2026Apr 30, 2026
ftw-tests-schema
Public
FTW Testing YAML Schema Definition
yaml schema tests
yaml schema tests ftw coreruleset
Go
•
Apache License 2.0
•3•1•5•3•Updated Apr 30, 2026Apr 30, 2026
crslang
Public
The next generation CRS language
Go
•
Apache License 2.0
•2•9•3•7•Updated Apr 30, 2026Apr 30, 2026
secrules_parsing
Public
A parser for the SecRules Langue
Python
•
Apache License 2.0
•9•23•2•10•Updated Apr 30, 2026Apr 30, 2026
modsecurity-crs-docker
Public
Official ModSecurity Docker + Core Rule Set (CRS) images
docker modsecurity modsecurity-core-rule-set
docker modsecurity modsecurity-core-rule-set core-rule-set
Dockerfile
•
Apache License 2.0
•86•433•11•6•Updated Apr 29, 2026Apr 29, 2026
crs-toolchain
Public
The Swiss army knife for CRS developers
tools crs
tools crs
Go
•
Apache License 2.0
•5•14•9•1•Updated Apr 27, 2026Apr 27, 2026
crs-plugin-test-action
Public
GitHub Action workflows to test plugins
plugin crs github-actions
plugin crs github-actions
Apache License 2.0
•1•1•1•1•Updated Apr 27, 2026Apr 27, 2026
go-ftw
Public
Web Application Firewall Testing Framework - Go version
testing waf testing-tools
testing waf testing-tools
Go
•
Apache License 2.0
•37•171•19•3•Updated Apr 27, 2026Apr 27, 2026
crs-linter
Public
Rules checker and linter for the CRS project
Python
•
Apache License 2.0
•3•4•6•3•Updated Apr 27, 2026Apr 27, 2026
albedo
Public
HTTP reflector and black hole
Go
•
Apache License 2.0
•4•6•1•0•Updated Apr 27, 2026Apr 27, 2026
website
Public
CRS Website files
website hugo hugo-site
website hugo hugo-site crs
HTML
•9•1•3•0•Updated Apr 26, 2026Apr 26, 2026
nextcloud-rule-exclusions-plugin
Public
Rule exclusion plugin for Nextcloud
nextcloud crs crs-plugin
nextcloud crs crs-plugin
Apache License 2.0
•8•39•2•0•Updated Apr 24, 2026Apr 24, 2026
body-decompress-plugin
Public
This is a plugin that brings on-the-fly decompression of RESPONSE_BODY to CRS.
Lua
•
Apache License 2.0
•4•1•1•3•Updated Apr 21, 2026Apr 21, 2026
template-plugin
Public template
Example plugin template to be used together with the OWASP CRS
plugin owasp crs
plugin owasp crs
Apache License 2.0
•7•0•0•0•Updated Apr 21, 2026Apr 21, 2026
machine-learning-integration-plugin
Public
A CRS plugin to use machine learning together with the rule set.
Lua
•
Apache License 2.0
•4•10•5•3•Updated Apr 21, 2026Apr 21, 2026
plugin-registry
Public
Registry for OWASP ModSecurity Core Rule Set plugins, official and 3rd party
crs crs-plugin
crs crs-plugin
10•49•3•2•Updated Apr 20, 2026Apr 20, 2026
renovate-config
Public
Mend Renovate centralized configuration
0•0•0•0•Updated Apr 19, 2026Apr 19, 2026
homebrew-tap
Public
Official Homebrew tap for OWASP CRS tools (crs-toolchain and related utilities).
Ruby
•
Apache License 2.0
•1•0•0•0•Updated Apr 17, 2026Apr 17, 2026
coraza-crs-docker
Public
Coraza, CRS and Apache/Caddy/Nginx
nginx apache owasp
nginx apache owasp coraza-waf owasp-crs
Dockerfile
•4•10•1•0•Updated Apr 17, 2026Apr 17, 2026
documentation
Public
CRS Documentation
hugo crs
hugo crs
JavaScript
•24•6•5•3•Updated Apr 16, 2026Apr 16, 2026
phpmyadmin-rule-exclusions-plugin
Public
Rule exclusion plugin for phpMyAdmin.
crs crs-plugin
crs crs-plugin
Apache License 2.0
•6•1•1•1•Updated Apr 13, 2026Apr 13, 2026
seclang_parser
Public
ANTLR based SecLang parser
antlr4 antlr4-grammar seclang
antlr4 antlr4-grammar seclang
Python
•
Apache License 2.0
•5•3•1•1•Updated Apr 13, 2026Apr 13, 2026
project-seaweed
Public
Testing CVEs against CRS
waf owasp cve-scanning
waf owasp cve-scanning core-rule-set
Go
•
Apache License 2.0
•2•8•1•1•Updated Apr 11, 2026Apr 11, 2026
google-oauth2-plugin
Public
Plugin to suppress false positives with Google OAuth2 online authorization service callbacks.
Apache License 2.0
•6•2•1•1•Updated Mar 27, 2026Mar 27, 2026
fake-bot-plugin
Public
This is a plugin that brings blocking of bots faking User-Agent to CRS.
crs crs-plugin
crs crs-plugin
Lua
•
Apache License 2.0
•5•13•2•0•Updated Mar 27, 2026Mar 27, 2026
referer-hardening-plugin
Public
Apache License 2.0
•3•1•1•3•Updated Mar 27, 2026Mar 27, 2026
cpanel-rule-exclusions-plugin
Public
Rule exclusion plugin for cPanel
Apache License 2.0
•2•0•1•0•Updated Mar 27, 2026Mar 27, 2026
wordpress-rule-exclusions-plugin
Public
Rule exclusion plugin for WordPress.
wordpress crs crs-plugin
wordpress crs crs-plugin
Apache License 2.0
•9•30•2•2•Updated Mar 27, 2026Mar 27, 2026
dokuwiki-rule-exclusions-plugin
Public
Rule exclusion plugin for DokuWiki
Apache License 2.0
•1•1•1•0•Updated Mar 27, 2026Mar 27, 2026
drupal-rule-exclusions-plugin
Public
Rule exclusion plugin for Drupal
Apache License 2.0
•4•5•2•2•Updated Mar 27, 2026Mar 27, 2026

ProTip! When viewing an organization's repositories, you can use the props. filter to filter by custom property.

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

CRS Project

All

All

51 repositories

coreruleset

ftw-tests-schema

crslang

secrules_parsing

modsecurity-crs-docker

crs-toolchain

crs-plugin-test-action

go-ftw

crs-linter

albedo

website

nextcloud-rule-exclusions-plugin

body-decompress-plugin

template-plugin

machine-learning-integration-plugin

plugin-registry

renovate-config

homebrew-tap

coraza-crs-docker

documentation

phpmyadmin-rule-exclusions-plugin

seclang_parser

project-seaweed

google-oauth2-plugin

fake-bot-plugin

referer-hardening-plugin

cpanel-rule-exclusions-plugin

wordpress-rule-exclusions-plugin

dokuwiki-rule-exclusions-plugin

drupal-rule-exclusions-plugin

All

All

Repositories list

51 repositories