# ModSecurity for IIS

Atomicorp does not build, host, or support the ModSecurity engine for IIS,
or the libraries it is built with (including PCRE).

Download it from the upstream project:

https://github.com/owasp-modsecurity/ModSecurity/releases

Upstream published Windows MSI installers through v2.9.7:

- https://github.com/owasp-modsecurity/ModSecurity/releases/download/v2.9.7/ModSecurityIIS_2.9.7-64b-64.msi
- https://github.com/owasp-modsecurity/ModSecurity/releases/download/v2.9.6/ModSecurityIIS_2.9.6-64b.msi
- https://github.com/owasp-modsecurity/ModSecurity/releases/download/v2.9.5/ModSecurityIIS_2.9.5-64b.msi
- https://github.com/owasp-modsecurity/ModSecurity/releases/download/v2.9.4/ModSecurityIIS_2.9.4-64b.msi
- https://github.com/owasp-modsecurity/ModSecurity/releases/download/v2.9.3/ModSecurityIIS_2.9.3-64b.msi

Releases after v2.9.7, including v2.9.15, are source archives only. There is
no upstream MSI for those versions.

An Atomicorp rules subscription covers the rules only. Rules for IIS are at:

https://updates.atomicorp.com/channels/rules/iis-latest/