Andrew Howe<p>Exciting news in the web application security world: the <a href="https://tech.lgbt/tags/ModSecurity" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>ModSecurity</span></a> <a href="https://tech.lgbt/tags/WAF" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>WAF</span></a> project is officially changing hands and moving under the <a href="https://tech.lgbt/tags/OWASP" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>OWASP</span></a> umbrella. It will become a community-driven free and open-source project once again! And, best of all, it will now live alongside the OWASP <a href="https://tech.lgbt/tags/CRS" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>CRS</span></a> (formerly <a href="https://tech.lgbt/tags/CoreRuleSet" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>CoreRuleSet</span></a>), the de-facto set of open-source WAF rules. Having it all in one place will be very beneficial to both projects! <a href="https://owasp.org/blog/2024/01/09/ModSecurity.html" rel="nofollow noopener" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">owasp.org/blog/2024/01/09/ModS</span><span class="invisible">ecurity.html</span></a></p>