Trustwave sponsors the ModSecurity open-source WAF project, and positions it as a key tool in the fight against Shellshock. Trustwave provides commercial signatures to its customers for ModSecurity. The open-source version has its own core ruleset as well.
“Whether you’re using open source and just the core ruleset or if you’re a commercial Trustwave customer, you’ll get signatures that will detect and block the Bash vulnerabilities,” Sigler said.