OWASP Core Rule Set

Also written: CRS, OWASP CRS, modsecurity-crs

A free, widely used set of WAF rules against common web attacks such as SQL injection. It decides by anomaly scoring.