What it does
Coraza is an open-source web application firewall for applications and APIs, with rule-set support and several integration arrangements.
Coraza can be deployed through a proxy, sidecar or library integration rather than one fixed appliance arrangement. Its official page describes connectors and Core Rule Set compatibility. Pick the integration matching the existing request path, then validate rule behavior against legitimate application traffic. API traffic may require its own policy decisions. Choose a connector supported by the existing gateway.
Strengths
- Several integration and deployment choices
Best for
- Teams integrating a WAF with an existing application gateway
Sources
- Open Source Web Application Firewall | OWASP Coraza (Oct 26, 2026)
- Coraza LICENSE (Oct 26, 2026)