Future of ModSecurity

74 views

Skip to first unread message

Ervin Hegedüs

unread,

Jan 12, 2024, 5:17:33 AMJan 12

to ModSecurity Core Rule Set project

Hi all,

(sorry if someone received crosspost)

Perhaps most users read the news: Trustwave transfers ModSecurity custodianship to the OWASP (Open Worldwide Application Security Project). This means the development of ModSecurity (mod_security2 Apache module, libmodsecurit3 library and libnginx-mod-http-modsecurity Nginx module) will continue under the umbrella of OWASP.

Here are the announcements:

https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/trustwave-transfers-modsecurity-custodianship-to-the-open-worldwide-application-security-project/

https://owasp.org/blog/2024/01/09/ModSecurity.html

There is a public channel on OWASP's Slack workspace, called #project-modsecurity. You can join the workspace here: https://owasp.org/slack/invite.

Feel free to join that channel if you have any questions/ideas, or want to participate in the development of any component.