ModSecurity

SecLang web application firewall engine for nginx, Apache and IIS; the rule engine is off until configured.

Provider: default
Kind: Web application firewall
Category: Security
Official docs: https://github.com/owasp-modsecurity/ModSecurity/wiki/Reference-Manual-%28v3.x%29

Properties · 4 set by this component

property	type	values	required	kind default	this component
auditLog · component property	boolean	—	no	false	inherited
botProtection	boolean	—	no	—	▸ false
connector · component property	enum	nginx \| apache \| iis	no	nginx	inherited
coreRuleSetInstalled · component property	boolean	—	no	false	inherited
customRuleCount	integer	—	no	—	inherited
managed	boolean	—	no	false	▸ false
managedRuleSet	string	—	no	—	inherited
mode	enum	detection \| prevention \| off	no	—	▸ off
rateLimiting	boolean	—	no	—	▸ false
ruleEngine · component property	enum	off \| detection-only \| on	no	off	inherited

Rules that apply · 0

Every rule whose selector covers this component's kind or its category. Whether a rule fires depends on the design: its properties, its edges and its groups.

No rule reads this kind yet. That is a gap, not a guarantee.

Use it in a design

nodes:
  - { id: "modsecurity", component: "modsecurity" }

Other Web application firewall products · 13

Web Application Firewallalibaba-wafalibabacloudwaf AWS WAF web ACLaws-wafawswaf AWS WAF Classicaws-waf-classicawswaf Azure Web Application Firewallazure-web-application-firewallazurewaf Firewall for AIcloudflare-firewall-for-aicloudflarewaf Cloudflare WAFcloudflare-wafcloudflarewaf Corazacorazawaf Imperva Application Securityimpervawaf NAXSInaxsiwaf Generic web application firewallwafwaf Google Cloud Armorgoogle-cloud-armorgcpwaf reCAPTCHA Enterprisegoogle-recaptcha-enterprisegcpwaf Web Application Firewalloci-wafociwaf

Source

1# yaml-language-server: $schema=../../schema/component.schema.json
2# ModSecurity (libmodsecurity v3): SecLang WAF engine embedded in a web server. The
3# Reference Manual gives SecRuleEngine a default of Off, and the OWASP Core Rule Set is
4# distributed separately and pulled in with Include, so no rules are active out of the box.
5schemaVersion: "1"
6type: "component"
7id: "modsecurity"
8kind: "waf"
9provider: "default"
10docs: "https://github.com/owasp-modsecurity/ModSecurity/wiki/Reference-Manual-%28v3.x%29"
11defaults:
12  mode: "off"
13  managed: false
14  botProtection: false
15  rateLimiting: false
16properties:
17  ruleEngine:
18    type: "enum"
19    values: ["off", "detection-only", "on"]
20    default: "off"
21  connector:
22    type: "enum"
23    values: ["nginx", "apache", "iis"]
24    default: "nginx"
25  coreRuleSetInstalled:
26    type: "boolean"
27    default: false
28  auditLog:
29    type: "boolean"
30    default: false

The same page as markdown, for an agent: /catalogue/components/modsecurity.md