Home/ Questions/Q 8170507
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-06-06T21:08:52+00:00

I’m looking for a nice rules-based web app firewall (WAF) that I can use

  • 0

I’m looking for a nice rules-based web app firewall (WAF) that I can use with my Java EE web app (WAR). So far I have scouted out Stinger from OWASP and ModSec (for Java). Stinger is newer but is not considered a full-blown WAF, and I’m only skepitcal with ModSecurity because it seems old and possibly outdated/discontinued (manual is copyrighted 2001 – 2004).

Can anyone recommend a good, free, open source WAF for Java EE web apps? At th very least, I need to secure/filter my HTTP/S headers. Thanks in advance!

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    You can try WebCastellum:

    Java-based Open Source WAF (Web Application Firewall) to include inside a web application in order to protect it against attacks like SQL Injection, Cross-Site Scripting (XSS), Cross-Site Request Forgery (CSRF), Parameter Manipulation and many more.

    • 0