Press release
Bern, September 3, 2024
United Security Providers becomes Gold Sponsor of the OWASP Core Rule Set
The open source project OWASP CRS has gained United Security Providers AG as a new gold sponsor. With this financial support, the Swiss provider of IT security solutions is promoting the further development of a comprehensive set of rules for securing web applications.
United Security Providers AG (USP), a Swiss specialist in IT security, has become a Gold Sponsor of the OWASP Core Rule Set (CRS). Under the umbrella of the OWASP Foundation, the CRS project develops an extensive set of rules for use with ModSecurity and other compatible web application firewalls (WAFs). CRS is considered the first line of defense against cyberattacks targeting internet applications. Its comprehensive rule set is designed to block a wide range of attack vectors with minimal false positives.
Support from sponsors is vital to the CRS project. Christian Folini, co-lead of the project, explains: “As an open-source project, we rely heavily on volunteers. But sponsors like USP enable us to provide free support, organize developer retreats, and occasionally assign dedicated tasks to developers.”
For USP, supporting the CRS project underscores its strategic importance in maintaining the quality and security of its own products at the highest level.
A Key Component of USP’s Security Solutions
As a software vendor specializing in application and network security, United Security Providers has long used the Core Rule Set as a key component of its commercial web access management solution, USP Secure Entry Server®. “Our developers contribute to the ongoing development of the CRS through enhancements and bug fixes, giving back to the community,” says Christoph Koch, CEO of USP. “A closer collaboration between our software developers and the CRS project team is mutually beneficial. CRS gains from our real-world experience, and we, in turn, pass the strength of the open-source community on to our customers. This creates a powerful synergy.”
The CRS is now in use by many companies and internet service providers worldwide. The project’s core team is truly international, with members in Germany, the UK, the Netherlands, Italy, Hungary, and Uruguay. Switzerland is especially well represented, with several developers involved—most notably, Christian Folini as one of the project’s two co-leads. Within Switzerland, the CRS is trusted by numerous banks, Swiss Post, SBB, and several cantonal administrations.
