Coraza Web Application Firewall is an enterprise grade, Golang port of ModSecurity.
It is flexible and powerful enough to serve as the baseline for many projects.
Coraza is free and open source software.
Key Features
- Enforce policies using OWASP CRS or create your own policies to stop attackers and generate important audit information.
- Fast in operation.
- Extensible – audit Loggers, persistence engines, operators, actions, create your own functionalities to extend the program.
- Supports many integrations to deploy a WAF as an application server, reverse proxy, container, and more.
- Enterprise ready.
Website: coraza.io
Support: GitHub Code Repository
Developer: Juan Pablo Tosso
License: Apache License 2.0
Coraza is written in Go. Learn Go with our recommended free books and free tutorials.
Related Software
| Web Application Firewalls | |
|---|---|
| ModSecurity | Web Application Firewall Engine for Apache, IIS and Nginx |
| BunkerWeb | Next-generation Web Application Firewall |
| NAXSI | Nginx Anti XSS & SQL Injection |
| Coraza | Enterprise grade, Golang port of ModSecurity |
| open-appsec | Automatic web application and API security using machine learning |
| lua-resty-waf | High Performance WAF Built on the OpenResty Stack |
Read our verdict in the software roundup.
Explore our comprehensive directory of recommended free and open source software. Our carefully curated collection spans every major software category.This directory is part of our ongoing series of informative articles for Linux enthusiasts. It features hundreds of detailed reviews, along with open source alternatives to proprietary solutions from major corporations such as Google, Microsoft, Apple, Adobe, IBM, Cisco, Oracle, and Autodesk. You’ll also find interesting projects to try, hardware coverage, free programming books and tutorials, and much more. Discovered a useful open source Linux program that we haven’t covered yet? Let us know by completing this form. |

