ModSecurity continues forward under the custodianship of OWASP, with renewed focus on maintenance, transparency, and long-term project stability.
A New Chapter for ModSecurity
Trustwave has transferred custodianship of ModSecurity to the Open Worldwide Application Security Project (OWASP). This transition marks a new chapter for the project, ensuring that the engine remains actively maintained, community-driven, and aligned with the evolving needs of modern web application security.
Under OWASP’s stewardship, ModSecurity benefits from broader collaboration, tighter integration with the OWASP Core Rule Set (CRS), and a renewed focus on openness and long-term sustainability. The project is very much alive, and with the collective energy of maintainers, contributors, and users, we are moving forward together to support the next generation of WAF protection.