Repositories list

• coreruleset

  Public

  coreruleset/coreruleset’s past year of commit activity
  OWASP CRS (Official Repository)

  securitywafowasp+ 2

  securitywafowasprulesetcrs

  Python

  •

  Apache License 2.0

  •453453 forks•3.1k3.1k stars•7070 issues•2828 pull requests•Updated Apr 23, 2026Apr 23, 2026

• nextcloud-rule-exclusions-plugin

  Public

  coreruleset/nextcloud-rule-exclusions-plugin’s past year of commit activity
  Rule exclusion plugin for Nextcloud

  nextcloudcrscrs-plugin

  nextcloudcrscrs-plugin

  Apache License 2.0

  •88 forks•3737 stars•22 issues•11 pull request•Updated Apr 23, 2026Apr 23, 2026

• website

  Public

  coreruleset/website’s past year of commit activity
  CRS Website files

  websitehugohugo-site+ 1

  websitehugohugo-sitecrs

  HTML

  •99 forks•11 star•33 issues•11 pull request•Updated Apr 22, 2026Apr 22, 2026

• body-decompress-plugin

  Public

  coreruleset/body-decompress-plugin’s past year of commit activity
  This is a plugin that brings on-the-fly decompression of RESPONSE_BODY to CRS.

  Lua

  •

  Apache License 2.0

  •44 forks•11 star•11 issue•33 pull requests•Updated Apr 21, 2026Apr 21, 2026

• go-ftw

  Public

  coreruleset/go-ftw’s past year of commit activity
  Web Application Firewall Testing Framework - Go version

  testingwaftesting-tools

  testingwaftesting-tools

  Go

  •

  Apache License 2.0

  •3737 forks•171171 stars•1919 issues•33 pull requests•Updated Apr 21, 2026Apr 21, 2026

• template-plugin

  Public template

  coreruleset/template-plugin’s past year of commit activity
  Example plugin template to be used together with the OWASP CRS

  pluginowaspcrs

  pluginowaspcrs

  Apache License 2.0

  •77 forks•00 stars•00 issues•00 pull requests•Updated Apr 21, 2026Apr 21, 2026

• machine-learning-integration-plugin

  Public

  coreruleset/machine-learning-integration-plugin’s past year of commit activity
  A CRS plugin to use machine learning together with the rule set.

  Lua

  •

  Apache License 2.0

  •44 forks•1010 stars•55 issues•33 pull requests•Updated Apr 21, 2026Apr 21, 2026

• crs-plugin-test-action

  Public

  coreruleset/crs-plugin-test-action’s past year of commit activity
  GitHub Action workflows to test plugins

  plugincrsgithub-actions

  plugincrsgithub-actions

  Apache License 2.0

  •11 fork•11 star•11 issue•11 pull request•Updated Apr 21, 2026Apr 21, 2026

• secrules_parsing

  Public

  coreruleset/secrules_parsing’s past year of commit activity
  A parser for the SecRules Langue

  Python

  •

  Apache License 2.0

  •99 forks•2323 stars•22 issues•1010 pull requests•Updated Apr 21, 2026Apr 21, 2026

• crslang

  Public

  coreruleset/crslang’s past year of commit activity
  The next generation CRS language

  Go

  •

  Apache License 2.0

  •22 forks•99 stars•33 issues•77 pull requests•Updated Apr 20, 2026Apr 20, 2026

• plugin-registry

  Public
  Registry for OWASP ModSecurity Core Rule Set plugins, official and 3rd party

  crscrs-plugin

  crscrs-plugin

  1111 forks•4848 stars•33 issues•22 pull requests•Updated Apr 20, 2026Apr 20, 2026

• renovate-config

  Public
  Mend Renovate centralized configuration

  00 forks•00 stars•00 issues•00 pull requests•Updated Apr 19, 2026Apr 19, 2026

• homebrew-tap

  Public
  Official Homebrew tap for OWASP CRS tools (crs-toolchain and related utilities).

  Ruby

  •

  Apache License 2.0

  •11 fork•00 stars•00 issues•00 pull requests•Updated Apr 17, 2026Apr 17, 2026

• crs-toolchain

  Public
  The Swiss army knife for CRS developers

  toolscrs

  toolscrs

  Go

  •

  Apache License 2.0

  •55 forks•1414 stars•1111 issues•33 pull requests•Updated Apr 17, 2026Apr 17, 2026

• coraza-crs-docker

  Public
  Coraza, CRS and Apache/Caddy/Nginx

  nginxapacheowasp+ 2

  nginxapacheowaspcoraza-wafowasp-crs

  Dockerfile

  •44 forks•1010 stars•11 issue•00 pull requests•Updated Apr 17, 2026Apr 17, 2026

• documentation

  Public
  CRS Documentation

  hugocrs

  hugocrs

  JavaScript

  •2424 forks•66 stars•44 issues•33 pull requests•Updated Apr 16, 2026Apr 16, 2026

• crs-linter

  Public
  Rules checker and linter for the CRS project

  Python

  •

  Apache License 2.0

  •33 forks•44 stars•66 issues•33 pull requests•Updated Apr 16, 2026Apr 16, 2026

• phpmyadmin-rule-exclusions-plugin

  Public
  Rule exclusion plugin for phpMyAdmin.

  crscrs-plugin

  crscrs-plugin

  Apache License 2.0

  •66 forks•11 star•11 issue•11 pull request•Updated Apr 13, 2026Apr 13, 2026

• seclang_parser

  Public
  ANTLR based SecLang parser

  antlr4antlr4-grammarseclang

  antlr4antlr4-grammarseclang

  Python

  •

  Apache License 2.0

  •55 forks•33 stars•11 issue•11 pull request•Updated Apr 13, 2026Apr 13, 2026

• albedo

  Public
  HTTP reflector and black hole

  Go

  •

  Apache License 2.0

  •44 forks•66 stars•11 issue•00 pull requests•Updated Apr 13, 2026Apr 13, 2026

• project-seaweed

  Public
  Testing CVEs against CRS

  wafowaspcve-scanning+ 1

  wafowaspcve-scanningcore-rule-set

  Go

  •

  Apache License 2.0

  •22 forks•88 stars•11 issue•11 pull request•Updated Apr 11, 2026Apr 11, 2026

• modsecurity-crs-docker

  Public
  Official ModSecurity Docker + Core Rule Set (CRS) images

  dockermodsecuritymodsecurity-core-rule-set+ 1

  dockermodsecuritymodsecurity-core-rule-setcore-rule-set

  Dockerfile

  •

  Apache License 2.0

  •8787 forks•432432 stars•1010 issues•33 pull requests•Updated Apr 4, 2026Apr 4, 2026

• ftw-tests-schema

  Public
  FTW Testing YAML Schema Definition

  yamlschematests+ 2

  yamlschematestsftwcoreruleset

  Go

  •

  Apache License 2.0

  •33 forks•11 star•55 issues•33 pull requests•Updated Apr 1, 2026Apr 1, 2026

• google-oauth2-plugin

  Public
  Plugin to suppress false positives with Google OAuth2 online authorization service callbacks.

  Apache License 2.0

  •66 forks•22 stars•11 issue•11 pull request•Updated Mar 27, 2026Mar 27, 2026

• fake-bot-plugin

  Public
  This is a plugin that brings blocking of bots faking User-Agent to CRS.

  crscrs-plugin

  crscrs-plugin

  Lua

  •

  Apache License 2.0

  •55 forks•1313 stars•22 issues•00 pull requests•Updated Mar 27, 2026Mar 27, 2026

• referer-hardening-plugin

  Public
  Apache License 2.0

  •33 forks•11 star•11 issue•33 pull requests•Updated Mar 27, 2026Mar 27, 2026

• cpanel-rule-exclusions-plugin

  Public
  Rule exclusion plugin for cPanel

  Apache License 2.0

  •22 forks•00 stars•11 issue•00 pull requests•Updated Mar 27, 2026Mar 27, 2026

• wordpress-rule-exclusions-plugin

  Public
  Rule exclusion plugin for WordPress.

  wordpresscrscrs-plugin

  wordpresscrscrs-plugin

  Apache License 2.0

  •99 forks•3030 stars•22 issues•22 pull requests•Updated Mar 27, 2026Mar 27, 2026

• dokuwiki-rule-exclusions-plugin

  Public
  Rule exclusion plugin for DokuWiki

  Apache License 2.0

  •11 fork•11 star•11 issue•00 pull requests•Updated Mar 27, 2026Mar 27, 2026

• drupal-rule-exclusions-plugin

  Public
  Rule exclusion plugin for Drupal

  Apache License 2.0

  •44 forks•55 stars•22 issues•22 pull requests•Updated Mar 27, 2026Mar 27, 2026