<p>I am looking for an open-source WAF solution that could be deployed in Kubernetes. I've looked a ModSecurity but it seems like good rules cost money and it also requires lots of tuning.</p>

<blockquote>
<p>it seems like good rules cost money and it also requires lots of tuning</p>
</blockquote>
<p>How can you define the &quot;good rules&quot;?</p>
<p>There are &quot;good rules&quot; in my opinion, called <a href="https://coreruleset.org" rel="noreferrer">CoreRuleSet</a>, it's absolutely free. And I don't think you need to tune it too much. CRS has a good <a href="https://github.com/coreruleset/coreruleset" rel="noreferrer">community</a>, you can ask anything. Its development is very active.</p>
<p>I think you should take a look.</p>
<p>Beside ModSecurity, there is a new competitor, called <a href="https://coraza.io/" rel="noreferrer">Coraza</a>. It also uses SecLang format for the configuration, and it's 100% compatible with CRS.</p>
