Repositories list

• coreruleset

  Public
  OWASP CRS (Official Repository)

  securitywafowasp+ 2rulesetcrs

  Python

  •

  Apache License 2.0

  •435•2.9k•81•41•Updated Jan 10, 2026Jan 10, 2026

• website

  Public
  CRS Website files

  websitehugohugo-site+ 1crs

  HTML

  •9•1•6•2•Updated Jan 10, 2026Jan 10, 2026

• crs-linter

  Public
  Rules checker and linter for the CRS project

  Python

  •

  Apache License 2.0

  •2•3•3•2•Updated Jan 8, 2026Jan 8, 2026

• documentation

  Public
  CRS Documentation

  hugocrs

  JavaScript

  •22•5•8•7•Updated Jan 6, 2026Jan 6, 2026

• modsecurity-crs-docker

  Public
  Official ModSecurity Docker + Core Rule Set (CRS) images

  dockermodsecuritymodsecurity-core-rule-set+ 1core-rule-set

  Dockerfile

  •

  Apache License 2.0

  •85•415•10•2•Updated Jan 6, 2026Jan 6, 2026

• seclang_parser

  Public
  ANTLR based SecLang parser

  antlr4antlr4-grammarseclang

  Python

  •

  Apache License 2.0

  •5•3•1•1•Updated Jan 6, 2026Jan 6, 2026

• coraza-crs-docker

  Public

  coreruleset/coraza-crs-docker’s past year of commit activity
  Coraza, CRS and Caddy

  Shell

  •2•7•1•2•Updated Jan 6, 2026Jan 6, 2026

• project-chat-archive

  Public
  Archive of the CRS project's monthly chats

  Python

  •1•0•0•0•Updated Jan 5, 2026Jan 5, 2026

• project-seaweed

  Public

  coreruleset/project-seaweed’s past year of commit activity
  Testing CVEs against CRS

  wafowaspcve-scanning+ 1core-rule-set

  Go

  •

  Apache License 2.0

  •2•7•1•2•Updated Jan 5, 2026Jan 5, 2026

• go-ftw

  Public
  Web Application Firewall Testing Framework - Go version

  testingwaftesting-tools

  Go

  •

  Apache License 2.0

  •36•161•20•5•Updated Dec 29, 2025Dec 29, 2025

• crs-toolchain

  Public
  The Swiss army knife for CRS developers

  toolscrs

  Go

  •

  Apache License 2.0

  •5•13•11•3•Updated Dec 22, 2025Dec 22, 2025

• albedo

  Public

  coreruleset/albedo’s past year of commit activity
  HTTP reflector and black hole

  Go

  •

  Apache License 2.0

  •3•6•0•0•Updated Dec 22, 2025Dec 22, 2025

• wordpress-rule-exclusions-plugin

  Public
  Rule exclusion plugin for WordPress.

  crscrs-plugin

  Apache License 2.0

  •8•26•2•0•Updated Dec 16, 2025Dec 16, 2025

• crslang

  Public
  The next generation CRS language

  Go

  •

  Apache License 2.0

  •0•5•3•1•Updated Dec 8, 2025Dec 8, 2025

• ftw-tests-schema

  Public
  FTW Testing YAML Schema Definition

  yamlschematests+ 2ftwcoreruleset

  Go

  •

  Apache License 2.0

  •3•1•4•1•Updated Dec 8, 2025Dec 8, 2025

• phpmyadmin-rule-exclusions-plugin

  Public
  Rule exclusion plugin for phpMyAdmin.

  crscrs-plugin

  Apache License 2.0

  •6•1•2•1•Updated Dec 5, 2025Dec 5, 2025

• crs-plugin-test-action

  Public

  coreruleset/crs-plugin-test-action’s past year of commit activity
  GitHub Action workflows to test plugins

  plugincrsgithub-actions

  Apache License 2.0

  •1•1•1•1•Updated Dec 2, 2025Dec 2, 2025

• traffic-observation-plugin

  Public
  This is an offical CRS plugin that logs information about requests that is not normally logged.

  Shell

  •

  Apache License 2.0

  •0•2•0•0•Updated Nov 28, 2025Nov 28, 2025

• rules-performance-tests

  Public
  Repository for GSoC 2023 project framework for rules performance testing.

  Python

  •

  Apache License 2.0

  •1•2•1•0•Updated Nov 26, 2025Nov 26, 2025

• plugin-registry

  Public
  Registry for OWASP ModSecurity Core Rule Set plugins, official and 3rd party

  crscrs-plugin

  11•44•3•3•Updated Nov 26, 2025Nov 26, 2025

• nextcloud-rule-exclusions-plugin

  Public
  Rule exclusion plugin for Nextcloud

  Apache License 2.0

  •8•32•1•4•Updated Nov 26, 2025Nov 26, 2025

• secrules_parsing

  Public
  A parser for the SecRules Langue

  Python

  •

  Apache License 2.0

  •9•22•2•6•Updated Nov 24, 2025Nov 24, 2025

• referer-hardening-plugin

  Public
  Apache License 2.0

  •2•1•1•1•Updated Nov 16, 2025Nov 16, 2025

• false-positive-report-plugin

  Public
  Lua

  •

  Apache License 2.0

  •1•2•0•2•Updated Oct 31, 2025Oct 31, 2025

• renovate-config

  Public
  Mend Renovate centralized configuration

  0•0•0•0•Updated Sep 8, 2025Sep 8, 2025

• wnram

  Public
  Go

  •

  BSD 2-Clause "Simplified" License

  •9•0•0•0•Updated Sep 5, 2025Sep 5, 2025

• body-decompress-plugin

  Public
  This is a plugin that brings on-the-fly decompression of RESPONSE_BODY to CRS.

  Lua

  •

  Apache License 2.0

  •5•1•0•1•Updated Aug 11, 2025Aug 11, 2025

• machine-learning-integration-plugin

  Public
  A CRS plugin to use machine learning together with the rule set.

  Lua

  •

  Apache License 2.0

  •3•10•4•1•Updated Aug 11, 2025Aug 11, 2025

• dokuwiki-rule-exclusions-plugin

  Public
  Rule exclusion plugin for DokuWiki

  Apache License 2.0

  •1•0•0•0•Updated Aug 10, 2025Aug 10, 2025

• drupal-rule-exclusions-plugin

  Public

  coreruleset/drupal-rule-exclusions-plugin’s past year of commit activity
  Rule exclusion plugin for Drupal

  Apache License 2.0

  •3•5•1•1•Updated Aug 9, 2025Aug 9, 2025