https://modsecurity.org/docs/1-introduction/index.htmlModSecurity is an open source web application firewall (WAF). A WAF adds an external security layer in front of web applications to detect and, if configured to do so, prevent attacks before they reach the application. ModSecurity provides protection from a range of attacks against web applications and allows for HTTP traffic monitoring, logging and real-time analysis with little or no changes to existing infrastructure. ModSecurity v2 and libModSecurity v3 ModSecurity is developed as two code lines. Both are maintained by the OWASP ModSecurity project (stewardship was transferred from Trustwave to OWASP in 2024) and both implement the same rule language, so rule sets such as the OWASP CRS run on either.Hugoen-UShttps://modsecurity.org/docs/1-introduction/1-1-faq/index.htmlMon, 01 Jan 0001 00:00:00 +0000https://modsecurity.org/docs/1-introduction/1-1-faq/index.htmlWho Leads the ModSecurity Project? ModSecurity was created by Ivan Ristić and was later developed and sponsored by Trustwave (SpiderLabs). In January 2024 Trustwave transferred stewardship of the code to the OWASP ModSecurity project, which maintains both the v2 and the v3 code lines today. The current project leaders are listed on the OWASP project page; the active maintainers are visible on the GitHub organization.