WAF Comparison Project

A Real-World Comparison

As many WAF solutions in the market are ModSecurity-based engines using OWASP Core Rule Set signatures, we assumed that the results may be similar, but to our surprise, there is a significant difference between solutions, and we are glad to share these results with the community.

This article describes how we tested the efficacy of several leading WAF solutions in real-world conditions.