{"data":{"slug":"crowdsec","name":"CrowdSec","tagline":"MIT open-source IDS/IPS and WAF with a community blocklist","category":"devops","categoryName":"DevOps","url":"https://docs.crowdsec.net","github":"https://github.com/crowdsecurity/crowdsec","pricing":"open-source","hook":"CrowdSec reads your logs and HTTP requests, detects attacks like brute force and scanning, and blocks bad IPs at your firewall, reverse proxy or CDN — a modern fail2ban with a shared reputation network.","whatsGood":"MIT (crowdsecurity/crowdsec), release v1.8.1 (2026-09-03). Detection and remediation are separate: parse logs on one machine, block on another via bouncers for nftables, nginx, Traefik, Cloudflare and more. Detection rules on the hub are MIT. The AppSec component is a WAF built on Coraza that loads SecLang rules and the OWASP Core Rule Set, and it can answer suspicious bots with a JavaScript proof-of-work challenge. ★~15.2k.","theCatch":"The community blocklist works by sharing signals: your instance reports attacking IPs to CrowdSec's network, so read the data policy. The web Console and premium blocklists are a commercial layer on top of the free engine. Tuning parsers and scenarios for custom apps takes real effort.","verdict":"The best free upgrade from fail2ban — especially behind a reverse proxy.","addedAt":"2026-10-18","featured":false,"domain":"DevOps","subSpecialty":"Infrastructure","subcategory":"Networking","tags":["api","self-host","permissive","observability","active"],"capabilities":[],"surfaces":["API","Self-host"],"ecosystem":["Multi-platform"],"licenseModel":"OSS/MIT","githubStars":15217,"starsPerWeek":45,"access":"free","archived":false,"repo":{"createdAt":"2020-05-15","pushedAt":"2026-10-18","license":"MIT","archived":false,"checkedAt":"2026-10-19"}},"related":[{"slug":"github-actions","name":"GitHub Actions","tagline":"CI/CD that lives where your code does"},{"slug":"docker","name":"Docker","tagline":"Container runtime that changed deployment"},{"slug":"kubernetes","name":"Kubernetes","tagline":"Container orchestration at scale"},{"slug":"pulumi","name":"Pulumi","tagline":"Infrastructure as code in real languages"},{"slug":"fly-io","name":"Fly.io","tagline":"Deploy apps to VMs close to your users"}],"links":{"self":"/api/gems/crowdsec","html":"/gems/crowdsec","markdown":"/gems/crowdsec.md","category":"/api/gems?category=devops","categoryPage":"/stacks/devops"}}