OWASP Coraza

OWASP Coraza is an open-source web application firewall library for Go that protects web applications and APIs. It supports ModSecurity SecLang rulesets and is 100% compatible with the OWASP Core Rule Set v4, which defends against SQL injection, cross-site scripting, code injection, and other common attacks.

Coraza runs as a library inside a Go program, letting you build security middleware or integrate it with existing web servers. It includes audit loggers, persistence engines, operators, and actions, all extensible through plugins.

The engine deploys on-premise through integrations for Caddy, Proxy-WASM proxies such as Envoy, HAProxy SPOE, and a C library for nginx. It runs on recent Go versions or tinygo, on Linux, Windows, and Mac.