Free
Free
Open-source WAF engine with free downloads; no commercial subscription is sold on the project site.
- Access
- Open-source WAF engine with free downloads; no commercial subscription is sold on the project site.
Security · Vendor site 2026-10-04
ModSecurity is an open-source web application firewall module for Apache, Nginx, and IIS that inspects HTTP traffic against a rule language. The OWASP-maintained project pairs with rule sets such as OWASP CRS to block common web attacks without rewriting application code.
Understand the total cost
Free
Free
Open-source WAF engine with free downloads; no commercial subscription is sold on the project site.
No retained pricing changes yet. A current price alone does not establish a historical trend.
Reviewed vendor source
Read original source ↗Facts apply to the named version and check date. Send a sourced correction if something changed.
Yes. ModSecurity has an ongoing free plan. Open-source WAF engine with free downloads; no commercial subscription is sold on the project site.
ModSecurity is listed as free. No paid plan with a published price was found.
API or developer access is mentioned. Rule language and module APIs are documented for integrators; no hosted SaaS API keys are offered.