Wafcontrol Project

OWASP Wafcontrol
Project

The Modern Dashboard for ModSecurity + CRS

OWASP Wafcontrol is an open-source dashboard that simplifies the installation, configuration, and management of ModSecurity and the OWASP Core Rule Set. It provides full visibility, automation, and control over your WAF.

GET LATEST: v1.0.0 How to install
OWASP Wafcontrol

Source & Releases

  • Open-source on GitHub
  • Stable release: v1.0.0
  • Full changelogs & assets
  • Community contributions
Releases Download v1.0.0

Documentation

  • Quickstart guide
  • Nginx & Apache setup
  • CRS rule management
  • Custom rules & tuning
  • Version switching
Read Docs How to install

Supported Attack Categories

  • SQL Injection (SQLi)
  • Cross-Site Scripting (XSS)
  • LFI / RFI
  • PHP / Java Code Injection
  • Web shells & shell injection
  • HTTPoxy, Shellshock
  • Session fixation
  • Scanner / Bot detection
  • Metadata & error leakages
Learn More How crs works?

Frequently Asked Questions

Common questions about OWASP WAFControl and how it streamlines ModSecurity + OWASP CRS management.

Do I need command-line skills to use WAFControl?

No. WAFControl provides a full web dashboard to install, configure, and manage ModSecurity + CRS without using the command line.

Which web servers are supported?

Both Nginx and Apache are supported. Installation and ongoing management for each is automated via the dashboard.

What features are included?

Attack logging, critical-attack view, top attacker analytics, CRS rule browser/editor, rule toggles, CRS version switcher, custom rule builder, and full ModSecurity settings control.

How is installation handled?

WAFControl automates preparing the server and installing ModSecurity + OWASP CRS for both Nginx and Apache, all from the web UI.

Can I create custom rules?

Yes. Build and manage custom rules with support for tags, transformations, severity, chaining, and quick enable/disable controls.

Didn't find what you were looking for?

Contact Us

If you need direct assistance or have specific questions about OWASP WAFControl, our team is ready to help you.

Get in Touch

Become a Sponsor

OWASP WAFControl is an open-source project. Support us by becoming a sponsor and get your logo featured here.

Become a Sponsor