NGINX ModSecurity is End-of-Life (EOL) as of March 2024. This significant change brings about an opportunity to modernize the 20-years old approach of protecting Web Apps & APIs, while keeping the benefits of open-source.
Although ModSecurity has many benefits, as a rule-based WAF, it depends on signatures to detect and prevent malicious activities and so falls short against zero-day attacks.
It is time to consider alternative open-source WAF technology that uses machine learning to deal both with OWASP-Top-10- and zero-day attacks and with a minimum tuning overhead as there are no signatures.
See more at [ Ссылка ] and in this blog - [ Ссылка ]
