Tools/ModSecurity
ModSecurity
The long-standing standard open-source WAF engine, typically paired with the OWASP Core Rule Set for out-of-the-box protection against SQLi/XSS/common exploits. Most-used open-source alternative to AWS_WAF; Coraza is the modern Go-based, ModSecurity-rule-compatible alternative gaining adoption for easier embedding into reverse proxies.