Coraza
An open-source, enterprise-grade Web Application Firewall library written in Go, compatible with ModSecurity SecLang rulesets.
What is Coraza?
Coraza is an open-source Web Application Firewall library written in Go that provides enterprise-grade security for web applications. It is compatible with ModSecurity SecLang rulesets and integrates seamlessly with the OWASP Core Rule Set v4 to protect against common threats like SQL injection and XSS. The library is designed to be embedded into applications or deployed via integrations with proxies and servers.
Developers and DevOps engineers building or securing web applications, APIs, and microservices who need a programmable, high-performance WAF solution. It is particularly suited for teams using Go or requiring ModSecurity rule compatibility in cloud-native or self-hosted environments.
Coraza offers a modern, extensible alternative to traditional WAFs with full OWASP CRS v4 support and minimal performance overhead. Its library-first design allows deep integration into existing infrastructure, while active community development ensures transparency and flexibility not always available in commercial solutions.
Overview
OWASP Coraza WAF is a golang modsecurity compatible web application firewall library
Use Cases
Best For
- Embedding a WAF directly into Go-based web applications or APIs
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
