CrowdSec Documentation

Pronounced: Krowd-Sek [/kraÊd-sek/]

Community-driven security that unifies detection, blocklists, and threat intel for modern infrastructure.

Choose your starting point

Each path links to setup, how-tos, and reference docs.

Analyze your logs to detect attacks, block malicious IPs, and protect web applications.

Best for self-hosted detection and protection.

Deploy curated threat intel feeds to protect your network without running detection yourself.

Best for fast protection with minimal setup.

Query CrowdSec threat intelligence to enrich investigations, automate lookups, and integrate with tools.

Best for enrichment, integrations, and investigations.

Answer a few questions and get a recommended path with install steps for your stack.