OWASP Coraza WAF is a golang modsecurity compatible web application firewall library
A wrapper for integrating the OWASP Coraza WAF with HAProxy's SPOE filters.
A modern web application firewall (WAF) management system built on top of HAProxy and OWASP Coraza WAF with the Coraza SPOA integration. This system provides a comprehensive backend API for managing HAProxy configurations, Coraza WAF rules, and traffic inspection.
Official plugins for BunkerWeb.
Web Application Firewall (WAF) for Kubernetes Gateways
Protect your Kubernetes workloads with ModSecurity-compatible rules and OWASP Core Rule Set (CRS) using native Kubernetes CRDs.
Production-ready Caddy HTTP middleware module for ALTCHA captcha verification. Protects web applications from automated abuse using cryptographic proof-of-work challenges.
A single-binary Web Application Firewall + reverse proxy for Go, built on Coraza (OWASP CRS) with a built-in admin dashboard.
Add TOTP 2FA to on-prem Microsoft Exchange via AD FS + Keycloak (no Azure AD). Guides, HAProxy/Coraza/Keycloak configs, setup scripts.
Full-featured, self-hostable WAF and reverse proxy in one binary, with a built-in web UI. No Docker or external database required.
Coraza WAF transformation plugin that normalizes leet-speak, Cyrillic/Greek homoglyphs, and zero-width Unicode characters to prevent WAF evasion
Self-hosted edge gateway for homelabs. Reverse proxy + WAF + load balancing + SSO in a single panel. Powered by Caddy, Coraza and CrowdSec.
Security policy as code for any API gateway. One policy per route (an OpenAPI extension), compiled by a deterministic CLI to Kong, Coraza, BunkerWeb, Cloudflare & more. Versions in git, drift fails CI. Apache-2.0.
A high-performance, embeddable web application firewall and fleet platform written in Zig.
Hardened Caddy + Coraza WAF container with OWASP CRS. Non-root execution, automatic TLS, rate limiting, Cosign-signed images, and SLSA provenance
To associate your repository with the coraza topic, visit your repo's landing page and select "manage topics."