Alternatives to ModSecurity

Acunetix

It is aimed at small and mid-size organizations managing web application and API security.

Astra Security

Astra identifies engineering, security, and DevOps teams, plus compliance-dependent organizations, as intended users.

Detectify Surface Monitoring

Surface Monitoring suits security teams seeking ongoing visibility into internet-facing assets and findings to prioritize for remediation.

Invicti

Invicti suits organizations managing application security across code, dependencies, infrastructure, APIs, secrets, and containers.

OWASP Coraza WAF

It suits teams deploying an open-source WAF for APIs or web applications on Linux, macOS or self-hosted infrastructure.