Projects/WASC OWASP Web Application Firewall Evaluation Criteria Project

PROJECT INFO What does this OWASP project offer you?

RELEASE(S) INFO What releases are available for this project?

what is this project? Name: WASC OWASP Web Application Firewall Evaluation Criteria Project (home page) Purpose: WAFEC is a joined industry effort to define what Web Application Firewalls are and provide the application security community with a tool to learn about WAFs and evaluate the suitability of different WAFs for their needs. License: Creative Commons Attribution License 2.5 who is working on this project? Project Leader(s): Tony Turner @ Full list of contributors how can you learn more? Project Pamphlet: Not Yet Created Project Presentation: Mailing list: Mailing List Archives Project Roadmap: [Roadmap View] Main links: WAFEC Home Page Get WAFEC (HTML) Get WAFEC (PDF) WAFEC Response Matrix WAFEC 2.0 project page WAFEC 2.0 Draft Key Contacts Contact Tony Turner @ to contribute to this project Contact Tony Turner @ to review or sponsor this project

current release Version 1.0 of WAFEC was released in 2006 and is heavily used in the industry featuring in an estimated 50% of WAF RFPs. WAFEC 1.0 is available for download in the following formats: PDF HTML Text last reviewed release Not Yet Reviewed other releases