# OWASP Core Rule Set: how AI models rank it, September 2026

IT AI Recommendation Index, September 2026 Edition. Named in 3 judge labels across 1 categories by 3 of 12 models. Page: https://it-ai-index.com/vendors/owasp-core-rule-set/

## Standing by category

| Category | Share | Rank | Negative rate | Labels |
|---|---|---|---|---|
| Web application firewalls | 0% | 73 | 33% | 3 |

## What the models said for it

- "Technical team, full control, $0 budget | ModSecurity/OWASP CRS" (DeepSeek V4 Flash, WAF)

## And against it

- "The default rules are notoriously aggressive. They frequently block valid traffic (False Positives)" (Qwen 3.7 Flash, WAF)

## Record

- Method: https://it-ai-index.com/methodology/
- Raw judge labels and full responses: https://it-ai-index.com/data/
- License: CC BY 4.0. Cite as IT AI Recommendation Index, September 2026 Edition, it-ai-index.com.