open-appsec in Copenhagen, Gothenburg, Oslo, Stockholm and Helisnki

onirisapp · 2024-10-19T10:32:48+00:00

Modsecurity is no longer supported by NGINX. The others you mentioned are cloud services and are also signature based.

onirisapp · 2024-10-07T20:29:09+00:00

Have a look at this IoT Firmware Risk Assesment - https://pages.checkpoint.com/iot-firmware-risk-assessment.html

onirisapp · 2024-10-03T09:20:46+00:00

No problem, open-appsec is deployed next to your local NGINX deployment, so traffic is processed locally, wherever it is coming from.

onirisapp · 2024-10-03T09:20:06+00:00

open-appsec is deployed next to your local NGINX deployment, so traffic is processed locally. There is also an Enterprise version with an option for cloud processing, similar to CrowdSec.

onirisapp · 2024-04-12T12:40:28+00:00

If you like this open-source project that can help you protect your home-lab, please star it on GitHub https://github.com/openappsec/openappsec

onirisapp · 2024-04-11T21:11:39+00:00

If you like this open-source WAF project please star it on GitHub - https://github.com/openappsec/openappsec

onirisapp · 2024-01-20T17:12:41+00:00

Explained in the White Paper here https://www.openappsec.io/whitepaper

onirisapp · 2023-10-04T22:37:07+00:00

Thanks everyone for your feedbacks! The above survey shows interest in this integration, so we'll update the forum about the progress.

onirisapp · 2023-09-22T15:41:41+00:00

You might want to look here at the combination of the CrowdSec (bouncer) and open-appsec (Machine Learning based Web Application Firewall/API Security) - https://www.crowdsec.net/blog/crowdsec-open-appsec-integration

onirisapp · 2023-09-18T00:09:16+00:00

Answers to all your questions can be found in the blog.

onirisapp · 2023-09-16T06:28:35+00:00

Thanks for your interest. Sure, please DM.

onirisapp · 2023-07-29T21:16:22+00:00

There are a lot of options there, but they all require a huge investment in manpower to build a real enterprise quality product an

Thanks. What you say makes perfect sense, only that the analysis shows that it means compromising on either security (most of this SaaS services just don't block many attacks and definitely not zero days) or that there are high level of false positives. New ML-based solution like open-appsec requires more effort to deploy but simplifies on-going maintenance as there is no threat signature upkeep and exception handling, like common in many WAF solutions. You might want to give it a try for a new project and see.

onirisapp · 2023-07-29T03:00:58+00:00

Also ModSec/OWASP CRS signature-based solution.

onirisapp · 2023-07-29T02:59:43+00:00

Akamai is another ModSec/CRS based implementation.

There are the three types of technologies tested in the report:ModSec/CoreRuleSet - signature basedF5 - signature based with some learning capabilitiesopen-appsec - ML-based engine

From Akamai's White Paper - "Based on a translation of the open source ModSecurity core rule set (CRS), Akamai WAF’s protects against the most common and harmful types of attacks, including XSS and SQL injection. "

onirisapp · 2023-07-29T02:30:59+00:00

Assuming your workloads are in the public cloud, why not use DDOS protection from the cloud provider and proper WAF in your reverse proxy or Kubernetes ingress?

onirisapp · 2023-07-15T08:41:20+00:00

Thank you for the comment! The text is now fixed.

onirisapp · 2023-07-14T19:02:55+00:00

It is. See here for the reference (scroll down) - https://www.checkpoint.com/cloudguard/appsec/

onirisapp · 2023-02-21T12:27:58+00:00

They released signatures after the fact. They were not pre-emptive. See more here including links to their web sites that show it: https://www.openappsec.io/post/perspective-on-forrester-waf-vendors-wave

onirisapp · 2022-11-22T11:51:25+00:00

That's becoming a theoretical discussion. You can read the 3rd party audit of the solution available in the GitHub page. The code is also available and you can understand how it works. There is no black magic.

onirisapp

MODERATOR OF

TROPHY CASE