Cloudflare OWASP Core Ruleset | Cloudflare Web Application Firewall (WAF) docs

The Cloudflare OWASP Core Ruleset is Cloudflare’s implementation of the OWASP ModSecurity Core Rule Set ↗ (CRS). Cloudflare routinely monitors for updates from OWASP based on the latest version available from the official code repository.