With the port of ModSecurity done, the next project the SpiderLabs researchers are looking at is creating a Web Application Firewall servlet for embedding into Apache Tomcat and other Java-based web application servers ??? but that work is still in its early days.