# AppSec (WAF) Feedback (Poll)

**URL:** <https://discourse.crowdsec.net/t/appsec-waf-feedback-poll/2264>\
**Category:** Uncategorized\
**Created:** [January 17, 2025, 12:41pm UTC](https://discourse.crowdsec.net/t/appsec-waf-feedback-poll/2264 "2025-01-17T12:41:25Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![iiAmLoz](https://dub1.discourse-cdn.com/flex013/user_avatar/discourse.crowdsec.net/iiamloz/32/386_2.png) [@iiAmLoz](https://discourse.crowdsec.net/u/iiAmLoz)\
**Post date:** [January 17, 2025, 12:41pm UTC](https://discourse.crowdsec.net/t/appsec-waf-feedback-poll/2264/1 "2025-01-17T12:41:25Z")

</div>

Hey 👋

We appreciate your feedback on the current status of [AppSec Component (WAF)](https://docs.crowdsec.net/docs/next/appsec/intro) and we currently see a lot of users not using this functionality compared to normal use of CrowdSec.

Let us know the reason if you are **NOT** using this functionality.

_Poll ([view on site](https://discourse.crowdsec.net/t/appsec-waf-feedback-poll/2264/1))_

If you have any additional feedback that doesnt fully convey from the options above then please add them into this thread!

---

<div class="post-metadata">

**Author:** ![iiAmLoz](https://dub1.discourse-cdn.com/flex013/user_avatar/discourse.crowdsec.net/iiamloz/32/386_2.png) [@iiAmLoz](https://discourse.crowdsec.net/u/iiAmLoz)\
**Post date:** [January 17, 2025, 12:42pm UTC](https://discourse.crowdsec.net/t/appsec-waf-feedback-poll/2264/2 "2025-01-17T12:42:43Z")

</div>



---

<div class="post-metadata">

**Author:** ![lva-itscope](https://dub1.discourse-cdn.com/flex013/user_avatar/discourse.crowdsec.net/lva-itscope/32/877_2.png) [@lva-itscope](https://discourse.crowdsec.net/u/lva-itscope)\
**Post date:** [January 17, 2025, 1:12pm UTC](https://discourse.crowdsec.net/t/appsec-waf-feedback-poll/2264/3 "2025-01-17T13:12:52Z")

</div>

I, personally, really like the feature. What holds us back from using it in production right now, is the lack in mTLS support. Since this is already on the roadmap ([[APPSEC] Allow MTLS auth · Issue #3172 · crowdsecurity/crowdsec · GitHub](https://github.com/crowdsecurity/crowdsec/issues/3172#issuecomment-2284145865)), we started playing around with it anyway.

---

<div class="post-metadata">

**Author:** ![ohv](https://avatars.discourse-cdn.com/v4/letter/o/97f17d/32.png) [@ohv](https://discourse.crowdsec.net/u/ohv)\
**Post date:** [January 23, 2025, 7:21am UTC](https://discourse.crowdsec.net/t/appsec-waf-feedback-poll/2264/4 "2025-01-23T07:21:52Z")

</div>

I have it enabled on NGIX (NPMPlus)

---

<div class="post-metadata">

**Author:** ![Joz](https://dub1.discourse-cdn.com/flex013/user_avatar/discourse.crowdsec.net/joz/32/1136_2.png) [@Joz](https://discourse.crowdsec.net/u/Joz)\
**Post date:** [February 11, 2025, 6:25am UTC](https://discourse.crowdsec.net/t/appsec-waf-feedback-poll/2264/5 "2025-02-11T06:25:06Z")

</div>

Why is the poll missing options that you do use it? seems a little strange to only have negative options 😂

I do use it and I think (some) people aren’t using it since they’re not aware of it, like I was until recently.

So if you ask me the solution is simple. Make it more visible somehow and communicate things more/push them.

---

<div class="post-metadata">

**Author:** ![AleksCee](https://dub1.discourse-cdn.com/flex013/user_avatar/discourse.crowdsec.net/alekscee/32/1434_2.png) [@AleksCee](https://discourse.crowdsec.net/u/AleksCee)\
**Post date:** [August 1, 2026, 12:56pm UTC](https://discourse.crowdsec.net/t/appsec-waf-feedback-poll/2264/6 "2026-08-01T12:56:03Z")

</div>

Is there a plan to support WAF/AppSec on apache2 nativ without a proxy in front? Or did I just not found the right walkthrough?

Thanks, Alex