Announcement: OWASP ModSecurity Core Rule Set Version 3.2.0

The OWASP ModSecurity Core Rule Set team is proud to announce the general availability of the OWASP ModSecurity Core Rule Set Version 3.2.0.

The new release is available for download here.

This release represents a very big step forward in terms of both capabilities and protections including:

Please see the CHANGES document with around 150 entries for a detailed list of new features and improvements:

Our desire is to see the Core Rule Set project used as a baseline security feature, effectively protecting from OWASP TOP 10 risks with few side effects. As such we attempt to cut down on false positives as much as possible in the default install.

Please use the CRS GitHub (, our slack channel (#coreruleset on, or the Core Rule Set mailing list to tell us about your experiences, including false positives or other issues with this release candidate.

Sincerely, Walter Hop, release manager, on behalf of the Core Rule Set development team

Walter Hop