Our lab

We replay each CVE's public exploit through a WAF in front of our own server. New templates are tested within a minute.

How it works

OWASP Core Rule Set 4.25.0

Paranoia level 1

Blocked 1,702
Partly blocked 1,208
Not blocked 1,520

4,430 CVEs · 1/31 harmless requests blocked

OWASP Core Rule Set 4.25.0

Paranoia level 2

Blocked 1,949
Partly blocked 1,325
Not blocked 1,156

4,430 CVEs · 1/31 harmless requests blocked

Latest tests

Live

Not blocked CVE-2023-37474
Path traversal in copyparty · paranoia level 1
32 min ago
Not blocked CVE-2025-1974
ingress-nginx admission controller RCE escalation · paranoia level 1
32 min ago
Not blocked CVE-2023-37474
Path traversal in copyparty · paranoia level 2
32 min ago
Blocked CVE-2025-1974
ingress-nginx admission controller RCE escalation · paranoia level 2
32 min ago
Not blocked CVE-2025-8110
Gogs Path Traversal Vulnerability · paranoia level 1
33 min ago
Not blocked CVE-2026-104935
Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability · paranoia level 1
33 min ago
Not blocked CVE-2025-8110
Gogs Path Traversal Vulnerability · paranoia level 2
33 min ago
Not blocked CVE-2026-104935
Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability · paranoia level 2
33 min ago
Partly blocked CVE-2026-110447
Collabora Online – Built-in CODE Server OS Command Injection Vulnerability · paranoia level 1
34 min ago
Partly blocked CVE-2026-42647
WordPress JoomSport plugin <= 5.7.7 - SQL Injection vulnerability · paranoia level 1
34 min ago

Exploited, and the open-source rules miss it

KEV CVEs whose public exploit passed OWASP CRS at paranoia 1

Vulnerability	In KEV since	Requests blocked
Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability CVE-2026-96652	2026-10-20	0 of 4	Vendor coverage
Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability CVE-2026-21589	2026-10-15	0 of 3	Vendor coverage
Ahsay AhsayCBS Improper Authentication Vulnerability CVE-2026-105133	2026-10-14	0 of 2	Vendor coverage
Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability CVE-2026-104935	2026-10-13	0 of 2	Vendor coverage
Adobe Commerce and Magento Incorrect Authorization Vulnerability CVE-2026-71362	2026-09-24	0 of 6	Vendor coverage
Check Point Multiple Products Path Traversal Vulnerability CVE-2026-93616	2026-09-22	0 of 1	Vendor coverage
Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability CVE-2026-76460	2026-09-16	0 of 2	Vendor coverage
JFrog Artifactory Improper Authentication Vulnerability CVE-2026-42018	2026-09-11	0 of 2	Vendor coverage
GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability CVE-2026-85706	2026-09-11	0 of 1	Vendor coverage
Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability CVE-2026-20079	2026-09-09	0 of 2	Vendor coverage
N-able N-central Static Code Injection Vulnerability CVE-2026-86218	2026-09-08	0 of 1	Vendor coverage
Kludex Starlette HTTP Request/Response Smuggling Vulnerability CVE-2026-48710	2026-09-02	0 of 2	Vendor coverage
Ray-Project Ray Code Injection Vulnerability CVE-2025-62593	2026-08-17	0 of 3	Vendor coverage
Metabase SQL Injection Vulnerability CVE-2026-72898	2026-08-11	0 of 2	Vendor coverage
N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability CVE-2026-18577	2026-08-03	0 of 1	Vendor coverage
WordPress Core Interpretation Conflict Vulnerability CVE-2026-63030	2026-07-21	0 of 2	Vendor coverage
iCagenda Unrestricted Upload of File with Dangerous Type Vulnerability CVE-2026-48939	2026-07-10	0 of 3	Vendor coverage
Balbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerability CVE-2026-56291	2026-07-10	0 of 2	Vendor coverage
Joomlack Page Builder Improper Access Control Vulnerability CVE-2026-56290	2026-07-07	0 of 3	Vendor coverage
SimpleHelp Authentication Bypass Vulnerability CVE-2026-48558	2026-06-29	0 of 5	Vendor coverage

Default rules miss some exploits

A WAF someone tunes catches more than one left on defaults.

Vigilbase Shield

Managed Cloudflare WAF on a monthly plan.

Managed Cloudflare WAF and DDoS protection on a monthly plan, run by our team.

See Shield plans

Managed Cloudflare

Cloudflare Enterprise, run by Vigilbase.

Cloudflare Enterprise licensing, with Vigilbase running the account: changes, tuning and verification.

Managed Cloudflare

Managed SOC

People watching the alerts, not just the rules.

Security operations run by Vigilbase on Vigilbase OS and the tools you already have.

Managed SOC