GoTestWAF
API / Application Security Testing Results
Overall grade:
D
64.5 / 100
Project name
:
krouter
URL : http://127.0.0.1:30104
Testing Date : 08 August 2026
GoTestWAF version : v0.5.8
Test cases fingerprint : c6d14d6138601d19d215bb97806bcda3
Used arguments : --url=http://127.0.0.1:30104 --grpcPort=30104 --wafName=krouter --noEmailReport --skipWAFIdentification --reportFormat=json,html --reportName=waf-evaluation
URL : http://127.0.0.1:30104
Testing Date : 08 August 2026
GoTestWAF version : v0.5.8
Test cases fingerprint : c6d14d6138601d19d215bb97806bcda3
Used arguments : --url=http://127.0.0.1:30104 --grpcPort=30104 --wafName=krouter --noEmailReport --skipWAFIdentification --reportFormat=json,html --reportName=waf-evaluation
Type
True-positive tests blocked
True-negative tests passed
Grade
API Security
D-
60.0%
N/A
0.0%
D-
60.0%
Application Security
F
47.2%
A-
90.8%
D+
69.0%
Benchmarks against other solutions
Type
API Security
Application Security
Overall score
ModSecurity PARANOIA=1
F
42.9%
D+
68.2%
F
55.5%
ModSecurity PARANOIA=2
F
57.1%
D-
60.1%
F
58.6%
ModSecurity PARANOIA=3
C+
78.6%
F
51.2%
D
64.9%
ModSecurity PARANOIA=4
A+
100.0%
F
36.7%
D+
68.4%
Details
Summary
Total requests sent: 822
Number of blocked requests: 335
Number of passed requests: 483
Number of unresolved requests: 4
Number of failed requests: 0
True-positive tests
Test set
Test case
Percentage
Blocked
Bypassed
Unresolved
Sent
Failed
community
community-128kb-rce
0.00%
0
0
1
1
0
community
community-128kb-sqli
0.00%
0
0
1
1
0
community
community-128kb-xss
0.00%
0
0
1
1
0
community
community-16kb-rce
100.00%
1
0
0
1
0
community
community-16kb-sqli
100.00%
1
0
0
1
0
community
community-16kb-xss
100.00%
1
0
0
1
0
community
community-32kb-rce
100.00%
1
0
0
1
0
community
community-32kb-sqli
100.00%
1
0
0
1
0
community
community-32kb-xss
100.00%
1
0
0
1
0
community
community-64kb-rce
100.00%
1
0
0
1
0
community
community-64kb-sqli
100.00%
1
0
0
1
0
community
community-64kb-xss
100.00%
1
0
0
1
0
community
community-8kb-rce
100.00%
1
0
0
1
0
community
community-8kb-sqli
100.00%
1
0
0
1
0
community
community-8kb-xss
100.00%
1
0
0
1
0
community
community-lfi
100.00%
8
0
0
8
0
community
community-lfi-multipart
100.00%
2
0
0
2
0
community
community-rce
50.00%
2
2
0
4
0
community
community-rce-rawrequests
100.00%
3
0
0
3
0
community
community-sqli
100.00%
12
0
0
12
0
community
community-user-agent
66.67%
6
3
0
9
0
community
community-xss
94.23%
98
6
0
104
0
community
community-xxe
0.00%
0
1
1
2
0
Summary for community
90.55%
143
12
4
159
0
owasp
crlf
85.71%
6
1
0
7
0
owasp
ldap-injection
8.33%
2
22
0
24
0
owasp
mail-injection
12.50%
3
21
0
24
0
owasp
nosql-injection
24.00%
12
38
0
50
0
owasp
path-traversal
30.00%
6
14
0
20
0
owasp
rce
33.33%
2
4
0
6
0
owasp
rce-urlparam
33.33%
3
6
0
9
0
owasp
rce-urlpath
0.00%
0
3
0
3
0
owasp
shell-injection
18.75%
6
26
0
32
0
owasp
sql-injection
39.58%
19
29
0
48
0
owasp
ss-include
50.00%
12
12
0
24
0
owasp
sst-injection
25.00%
6
18
0
24
0
owasp
xml-injection
0.00%
0
7
0
7
0
owasp
xss-scripting
40.18%
90
134
0
224
0
Summary for owasp
28.62%
167
335
0
502
0
owasp-api
graphql
0.00%
0
2
0
2
0
owasp-api
graphql-post
100.00%
2
0
0
2
0
owasp-api
grpc
100.00%
2
0
0
2
0
owasp-api
non-crud
100.00%
2
0
0
2
0
owasp-api
rest
57.14%
4
3
0
7
0
owasp-api
soap
40.00%
2
3
0
5
0
Summary for owasp-api
66.19%
12
8
0
20
0
Summary for true-positive tests
47.56%
322
355
4
681
0
True-negative tests
Test set
Test case
Percentage
Blocked
Bypassed
Unresolved
Sent
Failed
false-pos
texts
90.78%
13
128
0
141
0
True Negative Tests
128 true-negative requests identified as bypassed (test passed, good behavior)
13 true-negative requests identified as blocked (test failed, bad behavior)
Bypasses in Details
355 malicious requests have bypassed the security solution
Unresolved requests in Details
4 requests identified as blocked and passed or as not-blocked and not-passed