A curated list of awesome links related to application/API security in NGINX environment.

• Behavior Based Security with Repsheet: Aaron Bedra @nginxconf 2014 (video)
• Making applications secure with NGINX (video)
• Scripting NGINX for Overload Protection (video)

• Building a Security Shield for Your Applications with NGINX & Wallarm(https://www.nginx.com/blog/build-application-security-shield-with-nginx-wallarm)
• Let's Encrypt & Nginx
• Installing the Nginx Plus with mod_security WAF
• CloudFlare's new WAF: compiling to Lua

• gixy - a tool to analyze Nginx configuration to prevent security misconfiguration

• mod_security - mod_security for NGINX
• naxsi - NAXSI is an open-source, high performance, low rules maintenance WAF for NGINX.
• wallarm - NG-WAF for NGINX with security rules adjusted with AI

• testcookie-nginx-module - Simple robot mitigation module using cookie based challenge/response technique

• SEnginx - Security-Enhanced nginx
• lua-resty-waf - High-performance WAF built on the OpenResty stack