WAF & threat detection in Security & Identity

OWASP CRS

coreruleset/coreruleset

Popular

Generic attack-detection rule set (SQLi, XSS, RCE) used by ModSecurity, Coraza and many cloud WAFs.

3.4ktoday

CrowdSec

crowdsecurity/crowdsec

Rising

Collaborative IPS that parses logs, blocks attackers and shares IP reputation across its user network.

15.5k5d ago

Cloudflare

cloudflare.com

Popular

Global edge network for CDN, DNS, DDoS protection, WAF, Zero Trust and the Workers developer platform.

platform

Coraza

corazawaf/coraza

Rising

OWASP Go WAF engine compatible with ModSecurity rules and CRS; embeds in Caddy, Envoy and Go apps.

4ktoday

SafeLine

chaitin/SafeLine

Trending

Self-hosted WAF and reverse proxy from Chaitin with semantic attack detection and bot challenges.

23.2k3w ago

Anubis

TecharoHQ/anubis

Trending

Proof-of-work challenge proxy that shields websites from aggressive AI scrapers and bots.

24k6d ago

ModSecurity

owasp-modsecurity/ModSecurity

Legacy

Veteran open-source WAF engine for Apache and NGINX, now under OWASP; Coraza is its modern successor.

9.9k1d ago

Fail2ban

fail2ban/fail2ban

Popular

Bans IPs showing malicious behavior, such as SSH brute force, by watching log files.

19k5d ago

Wazuh

wazuh/wazuh

Popular

Open-source XDR and SIEM with host agents for intrusion detection, file integrity and compliance.

17.6k1w ago

Suricata

OISF/suricata

Popular

High-performance network IDS/IPS and security monitoring engine from the OISF.

6.8k6d ago

Zeek

zeek/zeek

Network security monitor that turns traffic into rich, structured logs for threat hunting.

8.2k1w ago

osquery

osquery/osquery

Exposes the operating system as SQL tables for endpoint visibility, detection and compliance.

23.7k1w ago


2	OWASP CRSPopular Generic attack-detection rule set (SQLi, XSS, RCE) used by ModSecurity, Coraza and many cloud WAFs.	3.4k	n/a	n/a	today	64
3	CrowdSecRising Collaborative IPS that parses logs, blocks attackers and shares IP reputation across its user network.	15.5k	n/a	n/a	5d ago	77
4	CloudflarePopular Global edge network for CDN, DNS, DDoS protection, WAF, Zero Trust and the Workers developer platform.	No public repository or package of its own to measure
4	CorazaRising OWASP Go WAF engine compatible with ModSecurity rules and CRS; embeds in Caddy, Envoy and Go apps.	4k	n/a	n/a	today	66
5	SafeLineTrending Self-hosted WAF and reverse proxy from Chaitin with semantic attack detection and bot challenges.	23.2k	n/a	n/a	3w ago	80
6	AnubisTrending Proof-of-work challenge proxy that shields websites from aggressive AI scrapers and bots.	24k	n/a	n/a	6d ago	80
7	ModSecurityLegacy Veteran open-source WAF engine for Apache and NGINX, now under OWASP; Coraza is its modern successor.	9.9k	n/a	n/a	1d ago	73
8	Fail2banPopular Bans IPs showing malicious behavior, such as SSH brute force, by watching log files.	19k	n/a	n/a	5d ago	78
9	WazuhPopular Open-source XDR and SIEM with host agents for intrusion detection, file integrity and compliance.	17.6k	n/a	n/a	1w ago	77
10	SuricataPopular High-performance network IDS/IPS and security monitoring engine from the OISF.	6.8k	n/a	n/a	6d ago	70
11	Zeek Network security monitor that turns traffic into rich, structured logs for threat hunting.	8.2k	n/a	n/a	1w ago	71
12	osquery Exposes the operating system as SQL tables for endpoint visibility, detection and compliance.	23.7k	n/a	n/a	1w ago	80


2	OWASP CRSPopular Generic attack-detection rule set (SQLi, XSS, RCE) used by ModSecurity, Coraza and many cloud WAFs.	3.4k	n/a	n/a	today	64
3	CrowdSecRising Collaborative IPS that parses logs, blocks attackers and shares IP reputation across its user network.	15.5k	n/a	n/a	5d ago	77
4	CloudflarePopular Global edge network for CDN, DNS, DDoS protection, WAF, Zero Trust and the Workers developer platform.	No public repository or package of its own to measure
4	CorazaRising OWASP Go WAF engine compatible with ModSecurity rules and CRS; embeds in Caddy, Envoy and Go apps.	4k	n/a	n/a	today	66
5	SafeLineTrending Self-hosted WAF and reverse proxy from Chaitin with semantic attack detection and bot challenges.	23.2k	n/a	n/a	3w ago	80
6	AnubisTrending Proof-of-work challenge proxy that shields websites from aggressive AI scrapers and bots.	24k	n/a	n/a	6d ago	80
7	ModSecurityLegacy Veteran open-source WAF engine for Apache and NGINX, now under OWASP; Coraza is its modern successor.	9.9k	n/a	n/a	1d ago	73
8	Fail2banPopular Bans IPs showing malicious behavior, such as SSH brute force, by watching log files.	19k	n/a	n/a	5d ago	78
9	WazuhPopular Open-source XDR and SIEM with host agents for intrusion detection, file integrity and compliance.	17.6k	n/a	n/a	1w ago	77
10	SuricataPopular High-performance network IDS/IPS and security monitoring engine from the OISF.	6.8k	n/a	n/a	6d ago	70
11	Zeek Network security monitor that turns traffic into rich, structured logs for threat hunting.	8.2k	n/a	n/a	1w ago	71
12	osquery Exposes the operating system as SQL tables for endpoint visibility, detection and compliance.	23.7k	n/a	n/a	1w ago	80

WAF & threat detection

OWASP CRS

CrowdSec

Cloudflare

Coraza

SafeLine

Anubis

ModSecurity

Fail2ban

Wazuh

Suricata

Zeek

osquery

Comparison

WAF & threat detection

OWASP CRS

CrowdSec

Cloudflare

Coraza

SafeLine

Anubis

ModSecurity

Fail2ban

Wazuh

Suricata

Zeek

osquery

Comparison

Search TechInTrends

WAF & threat detection

OWASP CRS

CrowdSec

Cloudflare

Coraza

SafeLine

Anubis

ModSecurity

Fail2ban

Wazuh

Suricata

Zeek

osquery

Comparison

WAF & threat detection

OWASP CRS

CrowdSec

Cloudflare

Coraza

SafeLine

Anubis

ModSecurity

Fail2ban

Wazuh

Suricata

Zeek

osquery

Comparison