Atomicorp develops and provides ModSecurity solution technology, ModSecurity Rules for large and complex implementations, and advanced ModSecurity- and libmodsecurity-based WAFs, as well as basic free ModSecurity downloads for hobbyists. The Atomic ModSecurity Rules and WAF commercial offerings contain thousands of security controls designed to protect web applications such as WordPress, Joomla, and Drupal, ecommerce platforms including Magento, WooCommerce, PrestaShop, OpenCart, Kubernetes and containers, web APIs, and Apache, Nginx, Litespeed, and Windows IIS web servers, and more.
Our popular Atomic ModSecurity Rules offers advanced rules, daily updates, professional technical support, real-time threat intelligence, and a ModSecurity rule set ready and tuned to defend your web architecture. Learn more about this Atomic ModSecurity Rules subscription service by visiting the Atomic ModSecurity Rules page.
Atomic ModSecurity is also available in an enterprise web application firewall (WAF) called Atomic WAF. Atomic WAF is loaded with evolving ModSecurity and Atomicorp cybersecurity rules, false positive and false negative-reduction machine learning logic and professional support, and capabilities and features including MFA SSO, Cloudflare integration, a management console and GUI, compliance reports, and more.
Or, discover how our premium but easy and affordable Atomic ModSecurity Integrator can help you rapidly integrate advanced ModSecurity Rules into your security system or web content environment. Learn more about Atomic ModSecurity Rules for system integrators, VARs, managed security service providers (MSSPs), CDNs and reverse proxy providers, and OEMs. Read more on the Atomic ModSecurity Rules page.
An Open Source WAF Enhanced for Enterprise-Strength
Atomicorp offers ModSecurity in a few easy options.
Trustwave Discontinues ModSecurity Support
Trustwave announced in August 2021 that it would no longer be supporting ModSecurity. Trustwave also set a date for end-of-support for its ModSecurity rule set. The move leaves Atomicorp as the primary commercial ModSecurity rules provider in the industry. Atomicorp will continue its 20-year commitment to the still quite active ModSec user community.
“We’ve been with ModSecurity the longest – since the very beginning – and we are committed to continue to enthusiastically support it for the foreseeable future. We are more than happy to support Trustwave ModSecurity users, whether they wish to keep the Trustwave rules or upgrade to an Atomicorp commercial rules feed.” — Michael Shinn, the founder and CEO of Atomicorp.
Read the press release.
ModSecurity Comparison
Feature | Free ModSecurity Rules | Remote ModSecurity Rules | Atomic ModSecurity Rules (Local) | Atomic WAF |
---|---|---|---|---|
Cost | Free | $22.50 per server per month. | $225 per server per year. Bulk discounts avail. | $300 per IP/Server. Bulk discounts avail. |
Enterprise-level Support | ||||
Number of Rules | Hundreds | Thousands | Thousands | Thousands |
Supports Unlimited Custom Rules | ||||
Update Frequency | Periodically | Daily | Daily | Daily |
Response Time for False Positives | Community support | Within the hour | Within the hour | Within the hour |
Support Model | Community | 24/7/365 | 24/7/365 | 24/7/365 |
Basic Attack Blocking | ||||
Scanner Blocker | ||||
Proxy Abuse | ||||
Custom White/Blacklists | ||||
Supports Third Party RBLs | ||||
Easy Geoblocking | ||||
Virtual Patches | ||||
PageRank Protection | ||||
Brute Force Attacks | ||||
Advanced Attacks Blocked (SSRF, XXE) | ||||
Data Loss Prevention | ||||
Realtime Malware Protection | ||||
Content Scraping Protection | ||||
Layer 7 DOS Protection | ||||
Realtime Malware Removal System | ||||
Automatic Whitelisting | ||||
Machine Learning | ||||
AntiSpam Protection | ||||
Real Time Threat Intelligence | ||||
Management Console | ||||
Rules Editing | Command Line | Command Line | GUI | |
Management Reports | ||||
Compliance Reports | ||||
Role based access control GUI | ||||
MFA SSO integration in GUI | ||||
Cloudflare Integration | ||||
Included Software | Rules only | Modsecurity, Rule Updater, Rules, Libraries | Modsecurity, Rule Updater, Rules, Libraries, Full management GUI and CWPP for appliance | |
Setup Process | Manual | Simple | One Step Automated | One Step Automated |
Update Process | Manual | Automated | Automated | Automated |
Agented ModSecurity Rules vs. Remote ModSecurity Rules
Download our solution overview on the difference between monthly remote rules and traditional on-premise ModSecurity
Read Our Solution Brief for WAF and Web Application Security
Attacks come virtually, across the cloud and internet, putting your communicative web entities at risk. Secure your web servers, websites, endpoints, and data, with Atomicorp zero trust cloud workload protection and ModSecurity WAF.
Read the Atomicorp ModSecurity Rules and WAF solution brief.