Collections

Appsec bot detection: challenge mode with weighted fingerprint scoring, rejecting at a balanced threshold (>= 75)

Appsec bot challenge: weighted fingerprint scoring engine (serves the challenge, computes the score)

Open-appsec support : open-appsec parser and scenarios

Appsec bot challenge: exempt well-known paths (crawler files, static assets, api, feeds, webhooks)

Appsec bot challenge: exempt verified good bots (search engines, ai crawlers, ad crawlers, citation services, social, monitoring)

A virtual patching collection, suitable for wordpress websites

Waf: non-blocking owasp core rule set

A collection of generic attack vectors for additional protection.

A generic virtual patching collection, suitable for most web servers.

Waf: blocking owasp core rule set

Waf bot detection: rejecting at a strict threshold (>= 45)

Waf bot detection: challenge mode with weighted fingerprint scoring, rejecting at a permissive threshold (>= 100)

Crs exclusion plugin for wordpress

Crs exclusion plugin for nextcloud

Crs exclusion plugin for cpanel

Crs exclusion plugin for xenforo

Crs exclusion plugin for phpbb

Crs exclusion plugin for dokuwiki

Crs exclusion plugin for phpmyadmin

Crs exclusion plugin for drupal