Tools/Coraza
Coraza
Modern, Go-based WAF engine — compatible with ModSecurity's rule syntax (including the OWASP Core Rule Set) but easier to embed directly into reverse proxies like NGINX or Envoy. Growing open-source alternative to AWS_WAF for teams wanting ModSecurity-equivalent protection with simpler deployment.