The correct deployment depends on where requests enter your stack. Pick the connector for the web server or place protection at the edge when applications are distributed.
Apache
ModSecurity for Apache
Install the embedded ModSecurity module, load a maintained rule set, and validate it safely on Apache.
Read guide →Nginxlibmodsecurity for Nginx
Connect Nginx to libmodsecurity 3, load the engine configuration and rules, and verify inspection.
Read guide →Edge WAFAtomicorp WAF at the edge with Varnish
Use Atomic ModSecurity rules through a hosted Varnish CDN/WAF, with a white-label option for service providers.
Read guide →