Enabling ModSecurity WAF for WordPress on Apache

wordpress security apache

ModSecurity adds server-side protection. Pair it with hardening and virtual patching practices.

Install

sudo apt install -y libapache2-mod-security2

Enable OWASP CRS

Follow your distro’s packaged ruleset guidance.

⚠️ Test in staging first to reduce false positives. After enabling, run Apache configtest and reload.

Essential security hardening for self-hosted WordPress on Ubuntu — hardening baseline