×
🎓 Join the CrowdSec Academy: Level up on your cybersecurity knowledge
Start now

CrowdSec Console
Real-time visibility into threat detection and mitigation

The CrowdSec Console is a centralized dashboard providing insights into your security events. Gain a real-time macro overview of all your exposed workloads with visibility into threat detection, mitigation, IP reputation, and detailed analytics.
Get started for freeGet started for free
01/04

Create a home for all your Security Engines

  • Enroll your existing CrowdSec Security Engines to the Console with a simple CLI command
  • Manage fleets of CrowdSec installations and monitor installed scenarios, bouncers, alerts, and software versions
  • Manage your machines through naming and tagging
02/04

Get a visual overview of intrusion attempts

  • Visualize the alerts for all your Security Engines using detailed lists and charts
  • Explore the data with simple or complex filters (inclusion, exclusion through criteria...)
  • Access reputation metrics for all suspicious IPs
03/04

Understand suspicious activity and reduce alert fatigue

  • Identify which IP is attacking your services and through which attack vector
  • Analyze past activity history over time to identify trends and patterns
  • Create organizations, invite team members and share results for collaborative analysis
04/04

Leverage threat intelligence from world's largest CTI

  • Assess the aggressivity of each IP based on reports from the CrowdSec community
  • Access detailed information on offending IPs: country of origin, Autonomous System, type of attacks, aggressiveness level, report dates, etc.
  • Understand how and when this IP is attacking your environment

a clock inside a wheel and a tic over it

a magnifying glass over a screen

aws logo

a tic over a checklist

a magnifying glass over a document

a hand clicking on a dashboard

kubernetes logo

a forbidden icon

Why use the CrowdSec Console

an orange tic

Proactive defense mechanism

Stop reacting to threats and start preemptively blocking threats before they can impact your systems.

an orange tic

Real-time threat intelligence

Benefit from immediate and real-time shared intelligence on threats detected across the globe.

an orange tic

Background noise filtering

Get highly curated blocklists built on millions of signals from hundreds of thousands of real users worldwide.

CrowdSec Security Engine in few figures

CrowdSec is a free, open-source and collaborative IPS. Analyze behaviors, respond to attacks & share signals across the community.

48M+

Rogue IPs in the CTI database

40K

"Shoot-in-sight" IPs in the blocklist

13M

Signals/day received from the community

64K+

Machines contributing to the CTI

Why use the CrowdSec Console

Proactive defense mechanism

Stop reacting to threats and start preemptively blocking threats before they can impact your systems.

Real-time threat intelligence

Benefit from immediate and real-time shared intelligence on threats detected across the globe.

Background noise filtering

Get highly curated blocklists built on millions of signals from hundreds of thousands of real users worldwide.

Run the Agent effectively on multiple platforms

OS

Linux
Linux
Coming soon
FreeBSD
FreeBSD
Coming soon
Windows
Windows
Coming soon
Open WRT
Open WRT
Coming soon

Services

Iptables
Iptables
Coming soon
Nftables
Nftables
Coming soon
Nginx
Nginx
Coming soon
Apache
Apache
Coming soon
Caddy
Caddy
Coming soon
PF
PF
Coming soon
Traefik
Traefik
Coming soon

Data sources

AWS Cloudwatch
AWS Cloudwatch
Coming soon
Amazon Kinesis
Amazon Kinesis
Coming soon
Docker
Docker
Coming soon

Platforms

Cloudflare
Cloudflare
Coming soon
AWS
AWS
Coming soon
Docker
Docker
Coming soon

Get started with CrowdSec today

Install a Security Engine
Select

$ curl -s https://packagecloud.io/install/repositories/crowdsec/crowdsec/script.deb.sh | sudo bash
$ sudo apt-get install crowdsec

COPY CODE
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.

$ curl -s https://packagecloud.io/install/repositories/crowdsec/crowdsec/script.rpm.sh | sudo bash
$ sudo yum install crowdsec

COPY CODE
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.

$ sudo apt-get install crowdsec

COPY CODE
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.

$ docker run -d -v acquis.yaml:/etc/crowdsec/acquis.yaml -e COLLECTIONS="crowdsecurity/sshd" -v /var/log/auth.log:/var/log/auth.log -v /path/mycustom.log:/var/log/mycustom.log --name crowdsec crowdsecurity/crowdsec

COPY CODE
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.

# pkg install crowdsec

COPY CODE
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.

$ wget -qO - https://github.com/crowdsecurity/crowdsec/releases/latest/download/crowdsec-release.tgz | tar zxvf -
$ cd crowdsec-v* && sudo ./wizard.sh -i

COPY CODE
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
an image of the CrowdSec community
icon of ellipses
icon of ellipses

Got a complex production environment?

Discover the CrowdSec Enterprise plan today
a screenshot of the alerts section on the CrowdSec console