How to install nginx-owasp-crs on Ubuntu

OWASP ModSecurity Core Rule Set for NGINX

Vendor: GetPageSpeed https://coreruleset.org/

Availability

Compare package tracks by distribution and architecture. Checkmarks show the architectures available in each repository channel.

Distro	Channel	Version
Ubuntu 26.04 (resolute)	Stable	4.30.0
Ubuntu 24.04 (noble)	Stable	4.30.0
Ubuntu 22.04 (jammy)	Stable	4.30.0
Ubuntu 20.04 (focal)	Stable	4.30.0

Description

The OWASP ModSecurity Core Rule Set (CRS) is a set of generic attack detection rules for use with ModSecurity or compatible web application firewalls. The CRS aims to protect web applications from a wide range of attacks, including the OWASP Top Ten, with a minimum of false alerts. This package installs the rule set under /etc/nginx/owasp-modsecurity-crs/ and provides a ready-to-use include manifest at /etc/nginx/modsec_includes.conf for loading with the ModSecurity-nginx connector.

Built for Ubuntu.

Install

Stable Ubuntu 20.04, 22.04, 24.04, 26.04

nginx-owasp-crs on Ubuntu 20.04 (focal), 22.04 (jammy), 24.04 (noble), 26.04 (resolute)

curl -fsSL https://extras.getpagespeed.com/release-latest.deb -o /tmp/getpagespeed-release.deb
sudo apt-get install -y /tmp/getpagespeed-release.deb
rm /tmp/getpagespeed-release.deb
sudo apt-get update
sudo apt-get install -y nginx-owasp-crs

Frequently asked questions

How do I install nginx-owasp-crs on Ubuntu?

Add the GetPageSpeed repository, then install the nginx-owasp-crs package with your system package manager.

Which Ubuntu versions is nginx-owasp-crs available for?

nginx-owasp-crs is available for Ubuntu 20.04, 22.04, 24.04, 26.04.