Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Date: Sun, 16 May 2021 12:29:32 -0700
From: Ivan Novikov <>
Subject: Re: Open Source WAF testing tools

Hi Martin,

We made GoTestWAF with no any vendor-specific things. It's mainly cover
OWASP Top-10 and API data encodings such as REST/JSON, SOAP/XML, GraphQL,
and WebSockets since the latest versions. You can add your payloads as easy
as making Yaml files.

At the end of the last year, it was significantly improved by community
detects , thanks Vulners team and
a project.

We are actively working on the project and any advice or suggestions in a
form of GitHub issue or pull-requests will be highly appreciated.

Have a great weekend everyone!

On Sun, May 16, 2021 at 12:07 PM Martin O'Neil <>

> Hi, list,
> Does anybody know an open-source tool for testing Web Application
> Firewalls?
> In an ideal case, with an out-of-the-box-ready CLI/UI, PDF reports, and a
> configurable set of payloads to test. I need it to check if my WAF
> deployment and rules work well.
> I found at least 5 projects, all made by WAF vendors.
> 1. byWallarm
> 2. by Signal
> Sciences
> 3. by Fastly
> 4. by Microsoft Azure WAF team
> 5. by F5
> The GoTestWAF project looks more active and supported by the community.
> Does anybody recommend some other GitHub repositories, preferably made by
> 3rd party folks?
> Thanks
> Martin.
Ivan Novikov
Wallarm, CEO

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.