Self-Learning WAF: Using Generative AI to Tame ModSecurity False Positives - [NCS-W01]

No ratings

Presented at RSAC 2026 by

Milan Duric

Raffael Schneider

This session willexplore how security engineers combined an open-source WAF (ModSecurity) with generative AI to dramatically reduce false positives. They will share how their system automatically tuned WAF rules using an AI model to analyze logs. Learn how this approach catches more attacks while keeping developers and customers happy—offering a blueprint to make WAFs effective again.