diff --git a/devel/libddwaf/Makefile b/devel/libddwaf/Makefile
index c766979e5dba..9cf8c7de41e2 100644
--- a/devel/libddwaf/Makefile
+++ b/devel/libddwaf/Makefile
@@ -1,42 +1,42 @@
 PORTNAME=	libddwaf
-PORTVERSION=	1.27.0
+PORTVERSION=	1.28.1
 CATEGORIES=	devel
 
 MAINTAINER=	sunpoet@FreeBSD.org
 COMMENT=	Datadog WAF engine
 WWW=		https://github.com/DataDog/libddwaf
 
 LICENSE=	APACHE20 BSD3CLAUSE
 LICENSE_COMB=	dual
 LICENSE_FILE_APACHE20=	${WRKSRC}/LICENSE.Apache
 LICENSE_FILE_BSD3CLAUSE=${WRKSRC}/LICENSE.BSD3
 
 BUILD_DEPENDS=	rapidjson>=0:devel/rapidjson
 LIB_DEPENDS=	libac.so:devel/libac \
 		libinjection.so:devel/libinjection \
 		libre2.so:devel/re2 \
 		libutf8proc.so:textproc/utf8proc
 
 USES=		cmake compiler:c++20-lang localbase:ldflags
 
 CFLAGS+=	-I${LOCALBASE}/include/re2
 CMAKE_OFF=	LIBDDWAF_TESTING \
 		LIBDDWAF_TEST_COVERAGE
 CMAKE_ON=	LIBDDWAF_BUILD_SHARED \
 		LIBDDWAF_BUILD_STATIC \
 		LIBDDWAF_ENABLE_LTO \
 		LIBDDWAF_VECTORIZED_TRANSFORMERS
 
 USE_GITHUB=	yes
 GH_ACCOUNT=	DataDog
 
 post-patch:
 # Clean up bundled libraries
 	#@${RM} -r ${WRKSRC}/src/vendor/fmt/
 	@${RM} -r ${WRKSRC}/src/vendor/libinjection/
 	@${RM} -r ${WRKSRC}/src/vendor/lua-aho-corasick/
 	#@${RM} -r ${WRKSRC}/src/vendor/radixlib/
 	@${RM} -r ${WRKSRC}/src/vendor/re2/
 	@${RM} -r ${WRKSRC}/src/vendor/utf8proc/
 
 .include <bsd.port.mk>
diff --git a/devel/libddwaf/distinfo b/devel/libddwaf/distinfo
index d20eb19b5e03..5604d39cbc58 100644
--- a/devel/libddwaf/distinfo
+++ b/devel/libddwaf/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1757120496
-SHA256 (DataDog-libddwaf-1.27.0_GH0.tar.gz) = 3e130fb121b862c247e16f24e8d8220fb0d3596bac45e7d962d33a81f765f663
-SIZE (DataDog-libddwaf-1.27.0_GH0.tar.gz) = 1506847
+TIMESTAMP = 1757436413
+SHA256 (DataDog-libddwaf-1.28.1_GH0.tar.gz) = 77dd1e93c52338feb2f62d49983ef4d16ce7fbcd1e4a8f355c064e5a677bce1f
+SIZE (DataDog-libddwaf-1.28.1_GH0.tar.gz) = 1513994