CrowdSec Documentation
Pronounced: Krowd-Sek [/kraʊd-sek/]
Community-driven security that unifies detection, blocklists, and threat intel for modern infrastructure.
Choose your starting point
Each path links to setup, how-tos, and reference docs.
Security Engine
Analyze your logs to detect attacks, block malicious IPs, and protect web applications.
Best for self-hosted detection and protection.
- ✓Behavior-based detection
- ✓Community threat sharing
- ✓AppSec / WAF for web apps
- ✓Open source
Explore product →
Blocklists
Deploy curated threat intel feeds to protect your network without running detection yourself.
Best for fast protection with minimal setup.
- ✓Curated IP lists
- ✓Ready to deploy
- ✓Automatic updates
- ✓Multiple categories
Explore product →
CTI
Query CrowdSec threat intelligence to enrich investigations, automate lookups, and integrate with tools.
Best for enrichment, integrations, and investigations.
- ✓REST API access
- ✓IP reputation scores
- ✓Attack context
- ✓SIEM integrations
Explore product →