CrowdSec Console
Monitor cyber threats on online services
Connecting CrowdSec Security Engine to the Console
Access an instant overview and be alerted of all suspicious acting
- Attach your existing CrowdSec Security Engine installations to the Console with a simple CLI command
- Manage fleets of CrowdSec installations and monitor installed scenarios, bouncers, alerts or software versions
- Manage your machines through naming and tagging

Get a visual overview of intrusion attempts
Explore all suspicious activity and intrusion attempts to understand the threat landscape
- Visualize all alerts on all installations either with a detailed list of all attacks or with charts
- Explore the data with simple or complex filters (inclusion, exclusion through criteria...)
- Click on an IP address to learn about its reputation

Understand suspicious activity on your services
CrowdSec reduces alert fatigue and allows users to focus on important threats and attacks
- Identify which IP is attacking your services and through which attack vector
- Analyze past activity history over time and months to identify trends and patterns
- Create organizations, invite team members and share results for collaborative analysis

Leverage cyber threat intelligence from the CrowdSec community
CrowdSec Console shares data from the CrowdSec community-driven CTI to provide detailed information on each IP's activity and reputation
- Assess the aggressivity of each IP, based on reports from the CrowdSec community
- Find out more about offending IPs: country of origin, autonomous system, type of attacks, aggressivity level, report dates etc.
- Understand how this IP is attacking your environment: how, when etc.

Why use the CrowdSec Console
Centralized overview of all your CrowdSec installations
Unique cockpit to manage all CrowdSec setups - detection scenarios, bouncers, updates
All alerts & attacks on all your servers in one place
Immediate overview of all threats, alerts on all your machines for faster decision-making
Bridge to the CrowdSec Cyber Threat Intelligence
Console offers an interface to access the community-fueled CTI to retrieve detailed intelligence on all attacking IP addresses
CrowdSec Security Engine in few figures
48M+
Rogue IPs in the CTI database
40K
"Shoot-in-sight" IPs in the blocklist
13M
Signals/day received from the community
64K+
Machines contributing to the CTI
Why use the CrowdSec Console
Centralized overview of all your CrowdSec installations
Unique cockpit to manage all CrowdSec setups - detection scenarios, bouncers, updates
All alerts & attacks on all your servers in one place
Immediate overview of all threats, alerts on all your machines for faster decision-making
Bridge to the CrowdSec Cyber Threat Intelligence
Console offers an interface to access the community-fueled CTI to retrieve detailed intelligence on all attacking IP addresses
Run the Agent effectively on multiple platforms
OS
Services
Data sources
Platforms