Download the latest Vulnerability & Exploitation Report

Download now
crowdsec mcp
Inside CrowdSec

CrowdSec MCP: Life Is Too Short for YAML

Learn how the CrowdSec Model Context Protocol (MCP) helps you leverage LLMs to automatically write reliable WAF rules & scenarios without writing complex YAML.

CrowdSec Welcomes db.gcve.eu, Strengthening Europe’s Vulnerability Intelligence, Without Losing Global Interoperability
Proactive Cybersecurity

CrowdSec Welcomes db.gcve.eu, Strengthening Europe’s Vulnerability Intelligence, Without Losing Global Interoperability

Strengthen your vulnerability workflows with db.gcve.eu: aggregated advisories, cross-source correlation, & real-time exploitation insights from CrowdSec.

live exploit tracker
Announcement

Introducing Live Exploit Tracker: Know What’s Exploited, Act Faster

See which CVEs are actively exploited in the wild. Live Exploit Tracker helps you prioritize faster using real attack activity, IPs, and IoCs.

Vulnerability Myths
Proactive Cybersecurity

5 Common Vulnerability Myths That Put Your Security At Risk

Discover 5 common cybersecurity myths that increase risk, from “we’re too small” to CVSS blind spots. Learn what really reduces exposure.

production telemetry vs honeypots
Proactive Cybersecurity

Honeypots vs Production Telemetry: What CISOs Should Trust for Threat Intelligence

Threat intelligence isn’t equal. Learn why real-world production telemetry reveals attacker intent, and why CISOs trust it over honeypot-based intel.

crowdsec react2shell
Ambassador Post

React2Shell: The Overly Spicy Side of React 19. CrowdSec to the Rescue!

React2Shell (CVE-2025-55182) is a critical RCE vulnerability impacting React Server Components and Next.js. Learn how CrowdSec mitigates it fast.

Protecting CAPI reliability: Introducing rate limiting on CrowdSec’s Central API
Announcement

Protecting CAPI reliability: Introducing rate limiting on CrowdSec’s Central API

To keep CrowdSec’s Central API (CAPI) reliable as usage continues to grow, we’ve introduced rate limiting. This change helps prevent misconfigured or broken deployments from generating excessive traffic, ensuring fair access and consistent performance for everyone.

ScaleCommerce x CrowdSec
Use Case

Multi-Tenant WAF In The Real World: How ScaleCommerce Uses CrowdSec

Discover how ScaleCommerce built true multi-tenant WAF management with CrowdSec, enabling dynamic per-tenant rule control without reloads or configuration sprawl.

security operations
Inside CrowdSec

Secure Kubernetes Ingress with CrowdSec and Traefik: WAF, Virtual Patching, and DevSecOps at Scale

Learn how to secure Kubernetes ingress with Traefik & CrowdSec. Enable open-source WAF, virtual patching, & DevSecOps-friendly protection for web-native workloads.

crowdsec for devsecops
Inside CrowdSec

DevSecOps Without Friction: How CrowdSec Fits Your Pipelines and Your Perimeter

CrowdSec enhances DevSecOps with behavior-based detection and edge filtering. Strengthen security without slowing pipelines.

haproxy remediation component
Inside CrowdSec

From Over-Engineered to Obvious: Simplifying HAProxy SPOA Architecture

A behind-the-scenes look at why we replaced a clever but over-engineered SPOA architecture with a simple, reliable single-listener design backed by goroutines.

openclassrooms et crowdsec
Partners

Building the Next Generation of Cyber Defenders with OpenClassrooms and CrowdSec

CrowdSec partners with OpenClassrooms to deliver accessible, hands-on cybersecurity education.

protect upsun with crowdsec
Integrations

Preemptively Protect Your Upsun Projects at Scale with CrowdSec

Stop attacks before they reach your apps on Upsun with a drop-in CrowdSec project blocking bad actors at the edge.

secure lamp server with crowdsec
Ambassador Post

Become the Gandalf of your LAMP Server: You Shall Not Pass

Protect your LAMP stack with open source WAFs. Learn how CrowdSec and ModSecurity block SQL injections, XSS, bots, and more.

drupal & crowdsec partner to protect the web
Partners

Beyond Patching: Drupal Association and CrowdSec Team Up to Protect the Open Web

Discover how the Drupal Association and CrowdSec are partnering to bring community-powered, adaptive protection to Drupal sites.

CrowdSec WAF: From First Steps to Advanced Deployments
Inside CrowdSec

CrowdSec WAF: From First Steps to Advanced Deployments

Secure apps with CrowdSec WAF: start with virtual patching, extend with CRS, add custom rules, and scale to enterprise protection.

cybersecurity effectiveness: crowdsec metrics
Inside CrowdSec

Measuring Cybersecurity Defense Effectiveness with CrowdSec Remediation Metrics

Discover how CrowdSec Remediation Metrics turn blocked attacks into actionable insights, optimized defenses, & demonstrate measurable results.

Strengthen Security and Protection with CrowdSec’s Open Source Web Application Firewall
Tutorial

Strengthen Security and Protection with CrowdSec’s Open Source Web Application Firewall

Block 75% of malicious traffic before it ever reaches your server with CrowdSec’s open source web application firewall.

Explore and Prioritize Vulnerabilities with the CrowdSec CVE Explorer
Announcement

Explore and Prioritize Vulnerabilities with the CrowdSec CVE Explorer

Introducing our new CVE Explorer. Learn what it is and how it can help your organization prioritize threats and vulnerabilities.

What Our Community Built with CrowdSec WAF: Real Stories, Real Security
Inside CrowdSec

What Our Community Built with CrowdSec WAF: Real Stories, Real Security

Discover how users around the world are deploying CrowdSec WAF across Kubernetes, cloud, and on-prem environments.

host secure tunnels with crowdsec and pangolin
Integrations

Web Defense with Pangolin and CrowdSec

Host secure tunnels with Pangolin, a privacy-first alternative to Cloudflare Tunnels, now integrated with CrowdSec for enhanced protection.