Direct Downloads

Stable releases

ModSecurity is an open source product licensed under GPLv2 (please read our licence clarifications for complete information). It comes with full source code and documentation. Releases are signed either by Ivan or Brian. Ivan's public PGP key can be downloaded from this server or from another server (or looked up at pgp.mit.edu, for that matter). Brian's key can be found here.

• modsecurity-apache_2.5.4.tar.gz (bundles Core Rules 1.6.1) (PGP MD5)
  
• modsecurity-core-rules_2.5-1.6.1.tar.gz

Older Stable Releases

• modsecurity-apache_2.1.7.tar.gz (PGP MD5)
  
• modsecurity-core-rules_2.1-1.5.1.tar.gz

You can still download the 1.9.x branch but please do note this version is not supported nor actively maintained:

• modsecurity-apache_1.9.5.tar.gz (PGP MD5)