Skip to content
@coreruleset

CRS Project

The first line of defense

CRS is an umbrella project

mindmap
  root((CRS))
    id[Rules]
      Creation
      Maintenance
      Plugins
    id[Release]
      Changelog
      Release procedure
      Backporting
    id[Security]
      Security tracker
      Triaging reports
    id[Tools]
      crs-toolchain
        regex-assembly
      go-ftw
      albedo
      Parser
        secrules_parsing
        seclang antlr
        msc_pyparser
      Linter
        rules-check (msc_pyparser based)
    id[Dev-On-Duty]
      Slack
      GH Issues
      StackOverflow
      Twitter/X
    id[Testing]
      Rules Testing
      Testing Schema
      Quantitative
      Performance
      DoS Testing
    id[Infrastructure]
      Updates (renovatebot)
      GitHub Actions
      Containers
        modsecurity-crs-docker
          apache
          nginx
          openresty
        coraza-crs-docker
      Sandbox
        AWS Infra
        OpenResty Frontend
        Challenges
        Docker Compose
    id[Project]
      Bi-Monthly meetings
      Developer Engagement
      Reimbursements
    id[Documentation]
      Website Blogs (coreruleset.org)
      Documentation (coreruleset.org/docs)
      OWASP Website (owasp.org/www-project-modsecurity-core-rule-set)
      Meeting archives
    id[Community Relationship]
      Sponsors
      Engines
      OWASP Projects
      OWASP HQ
    id[Retreat]
      Projects
      Knowledge Transfer
      Team Activities
    id[Public Relations]
      Blog Posts
      Social Media
    id[Research]
      CVEs (Seaweed)
      Status Page
      Payloads
      Evasions
Loading

Pinned Loading

  1. coreruleset coreruleset Public

    OWASP CRS (Official Repository)

    Python 2.8k 422

  2. modsecurity-crs-docker modsecurity-crs-docker Public

    Official ModSecurity Docker + Core Rule Set (CRS) images

    Dockerfile 403 88

  3. plugin-registry plugin-registry Public

    Registry for OWASP ModSecurity Core Rule Set plugins, official and 3rd party

    38 10

  4. go-ftw go-ftw Public

    Web Application Firewall Testing Framework - Go version

    Go 155 34

  5. documentation documentation Public

    CRS Documentation

    JavaScript 5 22

  6. crs-toolchain crs-toolchain Public

    The Swiss army knife for CRS developers

    Go 12 5

Repositories

Showing 10 of 48 repositories
  • documentation Public

    CRS Documentation

    coreruleset/documentation’s past year of commit activity
    JavaScript 5 22 7 7 Updated Nov 5, 2025
  • website Public

    CRS Website files

    coreruleset/website’s past year of commit activity
    HTML 1 8 6 4 Updated Nov 4, 2025
  • coreruleset Public

    OWASP CRS (Official Repository)

    coreruleset/coreruleset’s past year of commit activity
    Python 2,841 Apache-2.0 421 68 27 Updated Nov 4, 2025
  • coreruleset/referer-hardening-plugin’s past year of commit activity
    1 Apache-2.0 2 1 1 Updated Nov 3, 2025
  • project-chat-archive Public

    Archive of the CRS project's monthly chats

    coreruleset/project-chat-archive’s past year of commit activity
    Python 0 1 0 0 Updated Nov 3, 2025
  • secrules_parsing Public

    A parser for the SecRules Langue

    coreruleset/secrules_parsing’s past year of commit activity
    Python 22 Apache-2.0 9 2 5 Updated Nov 3, 2025
  • go-ftw Public

    Web Application Firewall Testing Framework - Go version

    coreruleset/go-ftw’s past year of commit activity
    Go 155 Apache-2.0 34 18 3 Updated Nov 3, 2025
  • coraza-crs-docker Public

    Coraza, CRS and Caddy

    coreruleset/coraza-crs-docker’s past year of commit activity
    Shell 7 3 1 2 Updated Nov 3, 2025
  • crs-linter Public

    Rules checker and linter for the CRS project

    coreruleset/crs-linter’s past year of commit activity
    Python 3 Apache-2.0 2 4 2 Updated Nov 3, 2025
  • albedo Public

    HTTP reflector and black hole

    coreruleset/albedo’s past year of commit activity
    Go 4 Apache-2.0 2 0 0 Updated Nov 3, 2025