(Length: 6 pages)

Executive Summary (This is a document excerpt)

The features that the ModSecurity product does include are well-executed and configurable, but the product lacks some key Web application firewall abilities. For instance, ModSecurity's policies can be very granular and specific, but administrators must write them manually, without the benefit of any automated assistance. ModSecurity's stringent implementation standards — build nothing unless you approach the highest level of security — will push the entire Web application firewall market toward higher-quality products. A free, open source product, ModSecurity is by far the most extensively deployed Web application firewall, with more than 10,000 customers. To compete in this market, ModSecurity must add the key missing functionalities, such as automatic policy learning and cookie, URL, and parameter protection. ModSecurity must also increase its staff to develop new features and support an increasing customer base.