@corazaio

OWASP Coraza Web Application Firewall Come by https://xitter.cf/t.co/XmFAitWsXL

coraza.io
Joined October 2022
  • Tweets33
  • Following1
  • Followers227
4Media
Yay!
Traefik Labs@traefik19 Mar 2024
📣 Traefik Labs Joins @OWASP and Integrates @corazaio and Core Rule Set Projects Read the Press Release here: hubs.ly/Q02p_Cdl0
2
7
620
🚨 CRS4 is here!
Core Rule Set@CoreRuleSet14 Feb 2024
Let CRS4 be your valentine! The @OWASP CRS / @CoreRuleSet team is proud to release CRS 4.0. Years in the making, it brings your WAF the best detection ever and a new plugin architecture. Read more at coreruleset.org/20240214/let… #CRS4 #CRS3 #WAF no more #WAFBypass #bugbountytips

Let CRS 4 be your valentine!

What a Valentine’s Day present we have got for you: today, the Core Rule Set project is releasing CRS 4! Finally, you may say – and would be absolutely right: it took us a long time to get there. But...

coreruleset.org
5
397
🚀 New release available! Coraza 3.1.0 is out github.com/corazawaf/coraza/…

Release Version 3.1.0 · corazawaf/coraza

This is a new minor version release with emphasis in improving the overall logging experience, fixes for interoperability of the http middleware with other middlewares, better defaults, various fix...

github.com
2
1
9
921
Discover the power of APISIX's enhanced WAF capabilities in tandem with @corazaio 🛡️ Read here: apisix.apache.org/blog/2023/… #apisix #coraza #apisecurity #WAF

Evaluate Coraza WAF with Apache APISIX | Apache APISIX

Evaluate a phase-one Coraza Proxy Wasm policy with Apache APISIX, understand current request-body limitations, and test the OWASP Core Rule Set safely.

apisix.apache.org
5
1
12
2,324
Meet the CRS team: As a South American, Felipe Zipitra has a special status in the @CoreRuleSet core team. The Uruguayan played basketball which taught him all about the value of teamwork. Read Felipe‘s portrait on the CRS blog: coreruleset.org/20231130/mee… #waf #crs #itsecurity
4
5
625
<3
Zufar Dhiyaulhaq
@zufardhiyaulhaq23 Nov 2023
in hackathon implementing and abstracting @corazaio in our internal developer portal @irwanshofwan @giovanismid @didieksayadi
1
393
After a detour lasting 18 months, the CRSv4 RC2 is out. The @OWASP #ModSecurity @CoreRuleSet team is proud to bring you detection capabilities exceeding everything else on the planet. Please test this throughly and help us with false positives. coreruleset.org/20231026/crs… #CRS4

CRS version 4.0.0 release candidate 2 available

The OWASP ModSecurity Core Rule Set (CRS) team is proud to announce the availability of release candidate 2 (RC2) of the upcoming CRS v4.0.0 release. The release candidate is available for download...

coreruleset.org
1
12
19
5,654
.@zufardhiyaulhaq's OWASP Global Appsec Talk about #WAF and Coraza is out youtube.com/watch?v=SCEZGRvc… 🚀

OWASP Coraza: Open Source WAF for Cloud Native Service Mesh - Zufar...

DescriptionA Web Application Firewall (WAF) is an essential functi...

youtube.com
3
3
512
Replying to @kotakmakan @zufardhiyaulhaq
Very wonderful sharing about WASM and OWASP Coraza
3
5
1,096
Coraza + APISIX = <3 This is the first time Coraza reaches Nginx and APISIX using #webassembly
Apache APISIX@ApacheAPISIX14 Sep 2023
Discover the power of APISIX's enhanced WAF capabilities in tandem with @corazaio 🛡️ Read here: apisix.apache.org/blog/2023/… #apisix #coraza #apisecurity #WAF

Evaluate Coraza WAF with Apache APISIX | Apache APISIX

Evaluate a phase-one Coraza Proxy Wasm policy with Apache APISIX, understand current request-body limitations, and test the OWASP Core Rule Set safely.

apisix.apache.org
1
1
8
1,337
😎 Six talks in the next three months, existing times: September: - kccncosschn2023.sched.com/ev… - sched.co/1OGhf - events.canonical.com/event/3… October: - owasp2023globalappsecsingap.… - sched.co/1OUxF November: - oredev.org/sessions/web-appl…
1
3
685
Yay!
Zufar Dhiyaulhaq
@zufardhiyaulhaq31 Aug 2023
I'll be talking about web application firewalls on Istio mesh using OWASP Coraza @corazaio at @IstioMesh Con. Plus, catch me chilling at KubeCon + CloudNativeCon + Open Source Summit @KubeCon_ China 2023 , let’s meet in Shanghai! kccncosschn2023.sched.com/ev…
4
313
Amazing <3
Zufar Dhiyaulhaq
@zufardhiyaulhaq16 Aug 2023
Hi folks, I will be talking about @corazaio in OWASP 2023 Global AppSec Singapore. See you there! owasp2023globalappsecsingap.… #OWASP #GlobalAppSecSingapore
1
258
🚀 New release is out! Notably it adds support for HTTPS log writer and adds support for memoization for regexes and aho-corasick dictionaries to reduce memory consumption in multi #WAF connectors github.com/corazawaf/coraza/…

Release Version 3.0.3 · corazawaf/coraza

What's Changed chore(readme): explicits CRS supported version by @M4tteoP in #834 chore: adds go mod tidy and go work sync for all modules. by @jcchavezs in #835 adds more verbosity on go mod ...

github.com
9
13
6,694
Exciting news! 🎉 OWASP Coraza WAF has officially graduated to a Production Project. This stamp of trust from #OWASP attests to Coraza's readiness as a reliable, production-level #appsec solution. Here's to creating a safer digital world with #coraza! #WAF
1
10
1
25
8,863
Guess what is the #WAF solution used here :D
The New Stack
@thenewstack23 Jun 2023
Docker Compose, WAF, and More! blog.getambassador.io/docker… from @ambassadorlabs by @thedevelopnik
1
336
📅 Community alert! Today we have our monthly meeting at 14:00 CEST. Join us! github.com/corazawaf/coraza/…

Monthly meeting agenda (June 2023) · Issue #814 · corazawaf/coraza

Date: Wednesday, February 21 at 12 p.m. UTC Previous agenda: #672 Current agenda General project status HTTP audit logs discussion #813 We need to start with v3.0.1 or v3.1? Sponsorship perks (what...

github.com
1
174
🔐Security Alert! We've issued a critical patch in #Coraza v3.0.1 to resolve a high-severity vulnerability (7.5 CVSSv3) causing app crashes on malicious requests due to log.Fatalf misuse. Upgrade NOW🚀: github.com/corazawaf/coraza/…. Thanks to @rmb1222 for the detection! #owasp #coraza

Release v3.0.1 · corazawaf/coraza

Important This tag fixes a high-severity vulnerability. See GHSA-c2pj-v37r-2p6h Full Changelog: v3.0.0...v3.0.1

github.com
3
5
5,422
Our coraza-proxy-wasm 0.1.0 is out, the first pre-release of the proxy-wasm extension based on @owasp Coraza v3.0. This extension can be used both on @EnvoyProxy and @IstioMesh to leverage #WAF features and @CoreRuleSet #wasm github.com/corazawaf/coraza-…

Release Version 0.1.0 · corazawaf/coraza-proxy-wasm

Initial release This is the very first release of coraza-proxy-wasm based on coraza@v3. You can download the wasm binary directly from the assets section or use the docker image docker pull ghcr.io...

github.com
3
5
1,163
Today we released #OWASP Coraza v3.0.0, a huge community effort that brought in lots of improvements in performance, API and compatibility github.com/corazawaf/coraza/… Join the party! #waf #golang #security

Release v3.0.0 · corazawaf/coraza

What's Changed Coraza's latest v3.0.0 release brings a highly refactored engine that offers more flexibility and major improvements. Notable changes include: Performance improvement: Perfo...

github.com
11
11
1,454
Load more