# CrowdSec

Open-source security engine that detects malicious behavior from logs and HTTP requests and blocks it through bouncers for web servers, reverse proxies and firewalls.


Source: https://findsoftware.frbit.cloud/crowdsec/
Last reviewed: 2026-10-28
Listed since: 2026-10-28

## Record

### Links

- home: https://www.crowdsec.net
- repository: https://github.com/crowdsecurity/crowdsec
- docs: https://docs.crowdsec.net
- pricing: https://www.crowdsec.net/pricing
- plugins: https://hub.crowdsec.net
- x: https://x.com/crowd_security
- discord: https://discord.com/invite/crowdsec
- forum: https://discourse.crowdsec.net

### Identity

- status: active
- maintainer: CrowdSec SAS
- maintainerType: company
- parent: unknown
- firstRelease: 2020
- hqCountry: FR

### Kind

- category: web-server
- hosting: binary
- language: go
- runtime: binary
- runtimeMin: unknown
- basedOn: unknown

### Content

- contentStore: not applicable
- databases: not applicable
- adminUi: yes
- headlessApi: not applicable
- templating: not applicable
- i18n: not applicable

### Rendering and deploy

- runsAs: always-on
- renderingModes: not applicable
- installMethod: deb and rpm packages

### License

- licenseModel: open-source
- license: MIT

### Releases

- currentMajor: 1
- latestReleaseDate: 2026-10-26

### Adoption

- githubStargazers: 15359
- packagistDownloads: not applicable
- npmWeeklyDownloads: not applicable
- contributors: 87
- pluginCount: unknown
- packagistMonthlyDownloads: unknown
- ecosystemsMonthlyDownloads: unknown
- httpArchiveSites: unknown
- wordpressActiveInstalls: unknown
- dependentRepos: unknown
- dependentPackages: unknown

### Sources

- urls: https://www.crowdsec.net/ (read 2026-10-28)
- urls: https://docs.crowdsec.net/docs/intro (read 2026-10-28)
- urls: https://api.github.com/repos/crowdsecurity/crowdsec (read 2026-10-28)
- firstRelease: https://github.com/crowdsecurity/crowdsec/releases (read 2026-10-28)
- maintainer: https://www.crowdsec.net/legal-notices (read 2026-10-28)
- maintainerType: https://www.crowdsec.net/legal-notices (read 2026-10-28)
- hqCountry: https://www.crowdsec.net/legal-notices (read 2026-10-28)
- category: https://docs.crowdsec.net/docs/appsec/intro (read 2026-10-28)
- language: https://api.github.com/repos/crowdsecurity/crowdsec (read 2026-10-28)
- runtime: https://api.github.com/repos/crowdsecurity/crowdsec (read 2026-10-28)
- installMethod: https://docs.crowdsec.net/u/getting_started/installation/linux (read 2026-10-28)
- installMethod: https://docs.crowdsec.net/u/getting_started/installation/docker (read 2026-10-28)
- installMethod: https://docs.crowdsec.net/docs/intro (read 2026-10-28)
- installMethod: https://docs.crowdsec.net/u/getting_started/installation/windows (read 2026-10-28)
- runsAs: https://docs.crowdsec.net/u/getting_started/installation/windows (read 2026-10-28)
- adminUi: https://docs.crowdsec.net/docs/intro (read 2026-10-28)
- urls: https://www.crowdsec.net/pricing (read 2026-10-28)
- license: https://api.github.com/repos/crowdsecurity/crowdsec (read 2026-10-28)
- licenseModel: https://api.github.com/repos/crowdsecurity/crowdsec (read 2026-10-28)
- currentMajor: https://github.com/crowdsecurity/crowdsec/releases/tag/v1.8.2 (read 2026-10-28)
- latestReleaseDate: https://github.com/crowdsecurity/crowdsec/releases/tag/v1.8.2 (read 2026-10-28)
- githubStargazers: https://api.github.com/repos/crowdsecurity/crowdsec (read 2026-10-28)
- contributors: https://api.github.com/repos/crowdsecurity/crowdsec/contributors?per_page=1 (read 2026-10-28)
- urls: https://github.com/crowdsecurity/crowdsec/blob/master/README.md (read 2026-10-28)

## Notes

CrowdSec is an open-source security engine that reads system logs and HTTP requests and detects behavior with scenarios. It does not block traffic itself: remediation components, called bouncers, enforce its decisions at the firewall, in web servers or in reverse proxies. The AppSec component adds web application firewall rules to web servers and reverse proxies that have a bouncer installed, and one engine can serve several of them.

CrowdSec, a French company, maintains the project. The engine is installed from packages or a Docker image, and a web console, offered as a hosted service, manages the setup alongside the cscli command-line tool.

## Worth knowing

The console is a hosted service, and its Premium tier is paid. Sharing detected attacks is optional: the introduction says the sharing applies when a user participates, and in return the engine downloads the community blocklist from the central API.

---

Data licensed CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/). Attributes are recorded, never scored; absent means unknown.
Credit, in full: FindSoftware, CC BY 4.0