# ModSecurity with OWASP Core Rule Set: how AI models rank it, November 2026

Gane Index, November 2026 Edition. Named in 2 judge labels across 1 category by 2 of 14 models. Page: https://www.gane.ai/index/it/vendors/modsecurity-with-owasp-core-rule-set

## Standing by category

| Category | Share | Rank | Negative rate | Labels |
|---|---|---|---|---|
| [Web application firewalls](https://www.gane.ai/index/it/network/web-application-firewalls/index.md) | 0% | 28 | 0% | 2 |

## What the models said for it

- "Have engineering capacity and want zero licensing fees: ModSecurity + OWASP CRS self-hosted" (Muse Glimmer 30B, WAF)
- "the gold standard for free web application protection" (Claude Haiku 4.5, WAF)

## By model

| Model | First choice | Alternative | Mention | Warning | Labels |
|---|---|---|---|---|---|
| Claude Haiku 4.5 | 0 | 1 | 0 | 0 | 1 |
| GPT-5.4 mini | 0 | 0 | 0 | 0 | 0 |
| Gemini 3.5 Flash | 0 | 0 | 0 | 0 | 0 |
| Perplexity Sonar | 0 | 0 | 0 | 0 | 0 |
| Grok 4.20 | 0 | 0 | 0 | 0 | 0 |
| Mistral Small | 0 | 0 | 0 | 0 | 0 |
| DeepSeek V4 Flash | 0 | 0 | 0 | 0 | 0 |
| Llama 4 Maverick | 0 | 0 | 0 | 0 | 0 |
| Qwen 3.7 Flash | 0 | 0 | 0 | 0 | 0 |
| Kimi K2 | 0 | 0 | 0 | 0 | 0 |
| GLM 4.7 FlashX | 0 | 0 | 0 | 0 | 0 |
| MiniMax M2.5 | 0 | 0 | 0 | 0 | 0 |
| GPT-6 Luna | 0 | 0 | 0 | 0 | 0 |
| Muse Glimmer 30B | 0 | 1 | 0 | 0 | 1 |

## Sources returned with these answers

The sites and pages cited by the answers that named ModSecurity with OWASP Core Rule Set, from 2 of the 2 answers that named it (only the models that return a source list).

### Domains cited

- appsentinels.ai: 2
- geekflare.com: 2
- softwaretestinghelp.com: 2
- wafplanet.com: 2
- aimultiple.com: 1
- cyberpress.org: 1
- cyberpresso.com: 1
- developers.cloudflare.com: 1
- devopsschool.com: 1
- linuxlinks.com: 1

### Pages cited

- https://appsentinels.ai/blog/top-25-web-application-firewalls-wafs-and-best-alternatives-for-cloudflare: 2
- https://geekflare.com/guides/best-web-application-firewall: 2
- https://softwaretestinghelp.com/web-application-firewall-waf: 2
- https://wafplanet.com/: 2
- https://wafplanet.com/best-waf-for/free: 2
- https://aimultiple.com/waf-solutions: 1
- https://cyberpress.org/best-waf-solutions: 1
- https://cyberpresso.com/reviews/best-web-application-firewalls: 1

## What it publishes

Every page modsecurity.org exposes, read 2026-09-29: 31 addresses. By kind, pages and the last 90 days:

- glossary or explainer: 2 pages, 0 in the last 90 days, latest 0001-01-01
- Recent: 0001-01-01 glossary or explainer: What is modsecurity http://modsecurity.org/faq/what-is-modsecurity
- Recent: 0001-01-01 glossary or explainer: What is the difference between modsecurity and crs http://modsecurity.org/faq/what-is-the-difference-between-modsecurity-and-crs

## Record

- Method: https://www.gane.ai/index/it/methodology
- License: CC BY 4.0. Cite as Gane Index, November 2026 Edition, www.gane.ai/index/it.
