All

51 repositories

coreruleset
Public
OWASP CRS (Official Repository)
security waf owasp
security waf owasp ruleset crs
Python
•
Apache License 2.0
•461•3.2k•73•40•Updated Jul 19, 2026Jul 19, 2026
coraza-crs-docker
Public
Coraza, CRS and Apache/Caddy/Nginx
nginx apache owasp
nginx apache owasp coraza-waf owasp-crs
Dockerfile
•5•13•1•0•Updated Jul 19, 2026Jul 19, 2026
body-decompress-plugin
Public
This is a plugin that brings on-the-fly decompression of RESPONSE_BODY to CRS.
Lua
•
Apache License 2.0
•4•1•1•3•Updated Jul 19, 2026Jul 19, 2026
project-seaweed
Public
Testing CVEs against CRS
waf owasp cve-scanning
waf owasp cve-scanning core-rule-set
Go
•
Apache License 2.0
•2•8•1•1•Updated Jul 18, 2026Jul 18, 2026
crs-toolchain
Public
The Swiss army knife for CRS developers
tools crs
tools crs
Go
•
Apache License 2.0
•5•14•8•4•Updated Jul 17, 2026Jul 17, 2026
modsecurity-crs-docker
Public
Official ModSecurity Docker + Core Rule Set (CRS) images
docker modsecurity modsecurity-core-rule-set
docker modsecurity modsecurity-core-rule-set core-rule-set
Dockerfile
•
Apache License 2.0
•88•445•12•8•Updated Jul 16, 2026Jul 16, 2026
secrules_parsing
Public
A parser for the SecRules Langue
Python
•
Apache License 2.0
•9•23•2•12•Updated Jul 15, 2026Jul 15, 2026
documentation
Public
CRS Documentation
hugo crs
hugo crs
JavaScript
•23•6•4•2•Updated Jul 15, 2026Jul 15, 2026
go-ftw
Public
Web Application Firewall Testing Framework - Go version
testing waf testing-tools
testing waf testing-tools
Go
•
Apache License 2.0
•38•177•14•2•Updated Jul 13, 2026Jul 13, 2026
seclang_parser
Public
ANTLR based SecLang parser
antlr4 antlr4-grammar seclang
antlr4 antlr4-grammar seclang
Python
•
Apache License 2.0
•5•4•1•1•Updated Jul 13, 2026Jul 13, 2026
crs-linter
Public
Rules checker and linter for the CRS project
Python
•
Apache License 2.0
•3•4•5•3•Updated Jul 13, 2026Jul 13, 2026
plugin-registry
Public
Registry for OWASP ModSecurity Core Rule Set plugins, official and 3rd party
crs crs-plugin
crs crs-plugin
11•52•3•2•Updated Jul 11, 2026Jul 11, 2026
homebrew-tap
Public
Official Homebrew tap for OWASP CRS tools (crs-toolchain and related utilities).
Ruby
•
Apache License 2.0
•1•0•0•0•Updated Jul 11, 2026Jul 11, 2026
ftw-tests-schema
Public
FTW Testing YAML Schema Definition
yaml schema tests
yaml schema tests ftw coreruleset
Go
•
Apache License 2.0
•3•1•6•3•Updated Jul 6, 2026Jul 6, 2026
crslang
Public
The next generation CRS language
Go
•
Apache License 2.0
•2•10•3•6•Updated Jul 6, 2026Jul 6, 2026
website
Public
CRS Website files
website hugo hugo-site
website hugo hugo-site crs
HTML
•9•1•4•1•Updated Jul 5, 2026Jul 5, 2026
phpmyadmin-rule-exclusions-plugin
Public
Rule exclusion plugin for phpMyAdmin.
crs crs-plugin
crs crs-plugin
Apache License 2.0
•6•1•1•2•Updated Jul 4, 2026Jul 4, 2026
nextcloud-rule-exclusions-plugin
Public
Rule exclusion plugin for Nextcloud
nextcloud crs crs-plugin
nextcloud crs crs-plugin
Apache License 2.0
•8•42•2•0•Updated Jul 2, 2026Jul 2, 2026
wordpress-rule-exclusions-plugin
Public
Rule exclusion plugin for WordPress.
wordpress crs crs-plugin
wordpress crs crs-plugin
Apache License 2.0
•9•31•1•1•Updated Jul 1, 2026Jul 1, 2026
crs-plugin-test-action
Public
GitHub Action workflows to test plugins
plugin crs github-actions
plugin crs github-actions
Apache License 2.0
•1•1•2•1•Updated Jun 29, 2026Jun 29, 2026
albedo
Public
HTTP reflector and black hole
Go
•
Apache License 2.0
•4•6•1•0•Updated Jun 29, 2026Jun 29, 2026
traffic-observation-plugin
Public
This is an offical CRS plugin that logs information about requests that is not normally logged.
Shell
•
Apache License 2.0
•1•4•1•2•Updated Jun 5, 2026Jun 5, 2026
false-positive-report-plugin
Public
Lua
•
Apache License 2.0
•2•2•0•4•Updated Jun 3, 2026Jun 3, 2026
template-plugin
Public template
Example plugin template to be used together with the OWASP CRS
plugin owasp crs
plugin owasp crs
Apache License 2.0
•7•0•0•0•Updated Jun 3, 2026Jun 3, 2026
wnram
Public
Go
•
BSD 2-Clause "Simplified" License
•9•0•0•0•Updated Jun 2, 2026Jun 2, 2026
project-chat-archive
Public
Archive of the CRS project's monthly chats
Python
•1•0•0•0•Updated Jun 2, 2026Jun 2, 2026
machine-learning-integration-plugin
Public
A CRS plugin to use machine learning together with the rule set.
Lua
•
Apache License 2.0
•4•10•5•3•Updated Jun 2, 2026Jun 2, 2026
xenforo-rule-exclusions-plugin
Public
Rule exclusion plugin for XenForo
Apache License 2.0
•2•0•1•2•Updated Jun 2, 2026Jun 2, 2026
referer-hardening-plugin
Public
Apache License 2.0
•3•1•1•1•Updated May 20, 2026May 20, 2026
fake-bot-plugin
Public
This is a plugin that brings blocking of bots faking User-Agent to CRS.
crs crs-plugin
crs crs-plugin
Lua
•
Apache License 2.0
•6•13•2•0•Updated May 17, 2026May 17, 2026

ProTip! When viewing an organization's repositories, you can use the props. filter to filter by custom property.

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

CRS Project

All

All

51 repositories

coreruleset

coraza-crs-docker

body-decompress-plugin

project-seaweed

crs-toolchain

modsecurity-crs-docker

secrules_parsing

documentation

go-ftw

seclang_parser

crs-linter

plugin-registry

homebrew-tap

ftw-tests-schema

crslang

website

phpmyadmin-rule-exclusions-plugin

nextcloud-rule-exclusions-plugin

wordpress-rule-exclusions-plugin

crs-plugin-test-action

albedo

traffic-observation-plugin

false-positive-report-plugin

template-plugin

wnram

project-chat-archive

machine-learning-integration-plugin

xenforo-rule-exclusions-plugin

referer-hardening-plugin

fake-bot-plugin

All

All

Repositories list

51 repositories