Name: Matteo Pace
Type: User
Company: @tetrateio
Bio: Cloud, Meshy and Security things. Eng at @tetrateio | Maintainer at OWASP @corazawaf | Dev at OWASP @coreruleset.
Cybersecurity MSc @ Polytechnic of Turin.
Twitter: M4tteoP
Location: Torino, Italy (UTC +1/+2)
Matteo Pace's Projects
OWASP Coraza WAF is a golang modsecurity compatible web application firewall library
EXPERIMENTAL: OWASP Coraza middleware for Caddy. It provides Web Application Firewall capabilities
Wrapper library to consume CRS in coraza without including files
http-wasm middleware based on Coraza WAF
httpbin server with coraza as reverse proxy
Playground for coraza engine
proxy-wasm filter based on Coraza WAF
proxy-wasm filter based on Coraza WAF
EXPERIMENTAL: A wrapper around the OWASP Coraza WAF for HAProxy's SPOE filters
OWASP ModSecurity Core Rule Set (Official Repository)
Cloud-native high-performance edge/middle/service proxy
the custom Envoy proxy with dynamic module HTTP filters
Envoy ext-proc gRPC filter usage demo with golang
Optimized UI components for Firebase
Framework for Testing WAFs (FTW!)
FTW Testing YAML Schema Definition
Web Application Firewall Testing Framework - Go version
HTTP Middleware library for TinyGo used to compile WebAssembly Guest modules
HTTP middleware libraries implemented by http-wasm WebAssembly Guest modules
A rapid http(s) benchmark tool written in Go
Kubegres is a Kubernetes operator allowing to deploy one or many clusters of PostgreSql instances and manage databases replication, failover and backup.
libinjection is a Golang port of the libinjection(https://github.com/client9/libinjection)
Fork of libpcre-8.44, able to be cross-compiled to WASM using WASI ABI
Minial ModSecurity WAF as WASM Envoy extension inside a Istio Service Mesh
ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx that is developed by Trustwave's SpiderLabs. It has a robust event-based programming language which provides protection from a range of attacks against web applications and allows for HTTP traffic monitoring, logging and real-time analysis. With over 10,000 deployments world-wide, ModSecurity is the most widely deployed WAF in existence.