<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>OWASP CRS on Support Tools</title><link>https://support.tools/tags/owasp-crs/</link><description>Recent content in OWASP CRS on Support Tools</description><generator>Hugo</generator><language>en-US</language><lastBuildDate>Fri, 23 Oct 2026 00:00:00 +0000</lastBuildDate><atom:link href="https://support.tools/tags/owasp-crs/index.xml" rel="self" type="application/rss+xml"/><item><title>ModSecurity on Ingress-NGINX: Enable the WAF and OWASP CRS</title><link>https://support.tools/modsecurity-kubernetes-ingress-nginx/</link><pubDate>Wed, 16 Oct 2024 01:00:00 -0500</pubDate><guid>https://support.tools/modsecurity-kubernetes-ingress-nginx/</guid><description>&lt;p&gt;The Kubernetes Ingress-NGINX controller ships with &lt;strong&gt;ModSecurity&lt;/strong&gt; (libmodsecurity v3) and the &lt;strong&gt;OWASP Core Rule Set (CRS)&lt;/strong&gt;, which turns the controller into a Web Application Firewall (WAF). This guide shows how to enable it cluster-wide or per Ingress, how to move from detection to blocking, how to test and read the logs, and what the 2025 to 2026 changes to ModSecurity and ingress-nginx mean for you.&lt;/p&gt;</description></item></channel></rss>