Beta Program

About the Beta Program

Join our Beta program to get early access to new features and functionalities for the CrowdSec Security Engine and Console. Your participation and feedback are key to CrowdSec’s community-driven approach.

Help us refine and improve our offerings and provide solutions that serve you and the community better. To join the CrowdSec Beta program, click the Beta opt-in option directly in the Console.

Upcoming Betas

CrowdSec Threat Forecast Blocklist - Beta starts 2024-10-25

What is it and what to expect?

The Threat Forecast Blocklist is a dynamic, adaptive blocklist customized to your organization's signals.
By identifying attacks on similar profiles, it predicts threats that will likely target your organization in the coming days.
It will update every 24 hours, and the signals of all your Security Engines will be considered to build the prediction.

It's tailored to your organization; hence, we expect that it should allow preemptive remediation, resulting in a drop in the number of alerts.
Optionally, if you have an iptables of nftables remediation component, you'll be able to see some metrics about this blocklist's efficiency

Who will have access to it?

If you have at least one enrolled security engine with an average of more than 100 alerts a week (total for your organization) you have a chance to be invited.
You'll receive an email on Friday, October the 25th, 2024.

Important note: You will have 15 days to start using the Threat Forecast Blocklist and 30 days in total starting today to test it out. If you do not use it within 15 days, your access will be reallocated to someone else.

How to subscribe to this blocklist

• Log into your console account
• Go to the blocklist catalog and search "forecast": https://app.crowdsec.net/blocklists?page=1&q=forecast
  • If you're part of the this beta, you should see the Threat Forecast Blocklist
  • Click on it
• You should have landed in the details page for this blocklist
• Click on subscribe to open the subscription popup and follow its instructions to subscribe to the blocklist.
  • We recommend subscribing your organization to the list as this will make sure that newly added security engines automatically benefit from the blocklist as well. -- If you want to have more finegrained controll, you can also select only specific engines to subscribe to the list.
• Click confirm subscription

Note that you must have a remediation component on those engines to effectively block the IPs.

Your feedback is key

As one of the first testers of the Threat Forecast Blocklist, your insights are crucial. Join the #beta-program channel on Discord, to share your experience and connect with fellow Beta Program members. At the end of the testing period, we'll also send a brief survey to gather your feedback.