Skip to content
@coreruleset

CRS Project

The first line of defense

CRS is an umbrella project

mindmap
  root((CRS))
    id[Rules]
      Creation
      Maintenance
      Plugins
    id[Release]
      Changelog
      Release procedure
      Backporting
    id[Security]
      Security tracker
      Triaging reports
    id[Tools]
      crs-toolchain
        regex-assembly
      go-ftw
      albedo
      Parser
        secrules_parsing
        seclang antlr
        msc_pyparser
      Linter
        rules-check (msc_pyparser based)
    id[Dev-On-Duty]
      Slack
      GH Issues
      StackOverflow
      Twitter/X
    id[Testing]
      Rules Testing
      Testing Schema
      Quantitative
      Performance
      DoS Testing
    id[Infrastructure]
      Updates (renovatebot)
      GitHub Actions
      Containers
        modsecurity-crs-docker
          apache
          nginx
          openresty
        coraza-crs-docker
      Sandbox
        AWS Infra
        OpenResty Frontend
        Challenges
        Docker Compose
    id[Project]
      Bi-Monthly meetings
      Developer Engagement
      Reimbursements
    id[Documentation]
      Website Blogs (coreruleset.org)
      Documentation (coreruleset.org/docs)
      OWASP Website (owasp.org/www-project-modsecurity-core-rule-set)
      Meeting archives
    id[Community Relationship]
      Sponsors
      Engines
      OWASP Projects
      OWASP HQ
    id[Retreat]
      Projects
      Knowledge Transfer
      Team Activities
    id[Public Relations]
      Blog Posts
      Social Media
    id[Research]
      CVEs (Seaweed)
      Status Page
      Payloads
      Evasions
Loading

Pinned Loading

  1. coreruleset coreruleset Public

    OWASP CRS (Official Repository)

    Python 2.9k 426

  2. modsecurity-crs-docker modsecurity-crs-docker Public

    Official ModSecurity Docker + Core Rule Set (CRS) images

    Dockerfile 407 88

  3. plugin-registry plugin-registry Public

    Registry for OWASP ModSecurity Core Rule Set plugins, official and 3rd party

    40 11

  4. go-ftw go-ftw Public

    Web Application Firewall Testing Framework - Go version

    Go 158 36

  5. documentation documentation Public

    CRS Documentation

    JavaScript 5 22

  6. crs-toolchain crs-toolchain Public

    The Swiss army knife for CRS developers

    Go 12 5

Repositories

Showing 10 of 50 repositories
  • website Public

    CRS Website files

    coreruleset/website’s past year of commit activity
    HTML 1 8 6 3 Updated Nov 26, 2025
  • go-ftw Public

    Web Application Firewall Testing Framework - Go version

    coreruleset/go-ftw’s past year of commit activity
    Go 158 Apache-2.0 36 21 5 Updated Nov 26, 2025
  • wordpress-rule-exclusions-plugin Public

    Rule exclusion plugin for WordPress.

    coreruleset/wordpress-rule-exclusions-plugin’s past year of commit activity
    26 Apache-2.0 8 2 0 Updated Nov 26, 2025
  • crs-toolchain Public

    The Swiss army knife for CRS developers

    coreruleset/crs-toolchain’s past year of commit activity
    Go 12 Apache-2.0 5 10 2 Updated Nov 26, 2025
  • modsecurity-crs-docker Public

    Official ModSecurity Docker + Core Rule Set (CRS) images

    coreruleset/modsecurity-crs-docker’s past year of commit activity
    Dockerfile 407 Apache-2.0 88 11 3 Updated Nov 26, 2025
  • seclang_parser Public

    ANTLR based SecLang parser

    coreruleset/seclang_parser’s past year of commit activity
    Python 2 Apache-2.0 5 1 2 Updated Nov 26, 2025
  • rules-performance-tests Public

    Repository for GSoC 2023 project framework for rules performance testing.

    coreruleset/rules-performance-tests’s past year of commit activity
    Python 2 Apache-2.0 1 1 0 Updated Nov 26, 2025
  • plugin-registry Public

    Registry for OWASP ModSecurity Core Rule Set plugins, official and 3rd party

    coreruleset/plugin-registry’s past year of commit activity
    40 11 3 3 Updated Nov 26, 2025
  • albedo Public

    HTTP reflector and black hole

    coreruleset/albedo’s past year of commit activity
    Go 5 Apache-2.0 3 1 0 Updated Nov 26, 2025
  • crslang Public

    The next generation CRS language

    coreruleset/crslang’s past year of commit activity
    Go 4 Apache-2.0 0 3 2 Updated Nov 26, 2025