| Category                   | Default Setup | Setup with ModSecurity |
| -------------------------- | -------- | ---------------- |
| Security through Obscurity | 4        | 4                |
| Sensitive Data Exposure    | 8        | 6                |
| Security Misconfiguration  | 4        | 4                |
| Injection                  | 8        | 5                |
| Broken Authentication      | 8        | 8                |
| Broken Access Control      | 7        | 4                |
| Forgotten Content          | 4        | 4                |
| Roll your own Security     | 6        | 5                |
| Improper Input Validation  | 5        | 4                |
| Vulnerable Components      | 6        | 6                |
| Insecure Deserialization   | 2        | 2                |
| XSS                        | 2        | 2                |
| Race Condition             | 1        | 1                |