Plans for production readyness?

[friesoft]

Hi,

as modsecurity is now an OWASP project: are there any plans for ongoing/improved modsecurity apache httpd support?

Will you continue to support modsecurity 2 or will this Modsecurity-apache module be developed for production readyness in combination with modsecurity 3?

Thanks!

[dune73]

Thanks for writing in.

We are working based on a preliminary project plan developed in Dec 2023 and Jan 2024.

The project plan proposes to keep v2 productive and supported at least on the short- to mid-term level. Long-term perspective is up to the new community to decide.

Stabilizing the v3 Apache connector is a high priority for the new devs. In fact there are more problems than only an Apache connector for v3, but it's probably one of the biggest ones.

If you are interested to be part of this adventure, then please join our Slack: It's channel #project-modsecurity on the OWASP Slack.