Skip to content
@coreruleset

CRS Project

The first line of defense

CRS is an umbrella project

mindmap
  root((CRS))
    id[Rules]
      Creation
      Maintenance
      Plugins
    id[Release]
      Changelog
      Release procedure
      Backporting
    id[Security]
      Security tracker
      Triaging reports
    id[Tools]
      crs-toolchain
        regex-assembly
      go-ftw
      albedo
      Parser
        secrules_parsing
        seclang antlr
        msc_pyparser
      Linter
        rules-check (msc_pyparser based)
    id[Dev-On-Duty]
      Slack
      GH Issues
      StackOverflow
      Twitter/X
    id[Testing]
      Rules Testing
      Testing Schema
      Quantitative
      Performance
      DoS Testing
    id[Infrastructure]
      Updates (renovatebot)
      GitHub Actions
      Containers
        modsecurity-crs-docker
          apache
          nginx
          openresty
        coraza-crs-docker
      Sandbox
        AWS Infra
        OpenResty Frontend
        Challenges
        Docker Compose
    id[Project]
      Bi-Monthly meetings
      Developer Engagement
      Reimbursements
    id[Documentation]
      Website Blogs (coreruleset.org)
      Documentation (coreruleset.org/docs)
      OWASP Website (owasp.org/www-project-modsecurity-core-rule-set)
      Meeting archives
    id[Community Relationship]
      Sponsors
      Engines
      OWASP Projects
      OWASP HQ
    id[Retreat]
      Projects
      Knowledge Transfer
      Team Activities
    id[Public Relations]
      Blog Posts
      Social Media
    id[Research]
      CVEs (Seaweed)
      Status Page
      Payloads
      Evasions
Loading

Pinned Loading

  1. coreruleset coreruleset Public

    OWASP CRS (Official Repository)

    Python 3.3k 473

  2. modsecurity-crs-docker modsecurity-crs-docker Public

    Official ModSecurity Docker + Core Rule Set (CRS) images

    Dockerfile 452 89

  3. plugin-registry plugin-registry Public

    Registry for OWASP CRS plugins, official and 3rd party

    Python 53 13

  4. go-ftw go-ftw Public

    Web Application Firewall Testing Framework - Go version

    Go 188 39

  5. documentation documentation Public

    CRS Documentation

    JavaScript 6 24

  6. crs-toolchain crs-toolchain Public

    The Swiss army knife for CRS developers

    Go 14 6

Repositories

Showing 10 of 53 repositories
  • coreruleset Public

    OWASP CRS (Official Repository)

    coreruleset/coreruleset's past year of commit activity
    Python 3,325 Apache-2.0 473 85 67 Updated Oct 27, 2026
  • fake-bot-plugin Public

    This is a plugin that brings blocking of bots faking User-Agent to CRS.

    coreruleset/fake-bot-plugin's past year of commit activity
    Lua 14 Apache-2.0 6 2 1 Updated Oct 27, 2026
  • traffic-observation-plugin Public

    This is an offical CRS plugin that logs information about requests that is not normally logged.

    coreruleset/traffic-observation-plugin's past year of commit activity
    Shell 4 Apache-2.0 1 1 2 Updated Oct 27, 2026
  • google-oauth2-plugin Public

    Plugin to suppress false positives with Google OAuth2 online authorization service callbacks.

    coreruleset/google-oauth2-plugin's past year of commit activity
    2 Apache-2.0 5 1 2 Updated Oct 27, 2026
  • machine-learning-integration-plugin Public

    A CRS plugin to use machine learning together with the rule set.

    coreruleset/machine-learning-integration-plugin's past year of commit activity
    Lua 10 Apache-2.0 4 5 5 Updated Oct 27, 2026
  • coreruleset/referer-hardening-plugin's past year of commit activity
    1 Apache-2.0 2 2 0 Updated Oct 27, 2026
  • xenforo-rule-exclusions-plugin Public

    Rule exclusion plugin for XenForo

    coreruleset/xenforo-rule-exclusions-plugin's past year of commit activity
    0 Apache-2.0 2 1 2 Updated Oct 27, 2026
  • cpanel-rule-exclusions-plugin Public

    Rule exclusion plugin for cPanel

    coreruleset/cpanel-rule-exclusions-plugin's past year of commit activity
    0 Apache-2.0 2 1 1 Updated Oct 27, 2026
  • wordpress-rule-exclusions-plugin Public

    Rule exclusion plugin for WordPress.

    coreruleset/wordpress-rule-exclusions-plugin's past year of commit activity
    33 Apache-2.0 9 2 0 Updated Oct 27, 2026
  • dokuwiki-rule-exclusions-plugin Public

    Rule exclusion plugin for DokuWiki

    coreruleset/dokuwiki-rule-exclusions-plugin's past year of commit activity
    1 Apache-2.0 2 1 1 Updated Oct 27, 2026