crowdsecurity

    crowdsecurity/crowdsec

    Open-source IDS/IPS, WAF and bot detection for Linux, Windows, Docker and Kubernetes, with a crowdsourced blocklist of malicious IPs.

    15.4K stars
    756 forks
    15.4K GitHub watchers
    Updated Nov 2, 2026
    View on GitHub

    Build with Backblaze B2

    SDKs, agent skills, IDE extensions, and reference pipelines from Backblaze Labs. All open source.

    Explore Backblaze Labs

    Loading star history...

    Where it stands

    Rank, growth pace and release cadence relative to everything GStars tracks.

    5 releases in the last 90 days, the latest 6 days ago, with 87 contributors on GitHub.

    Peaked at #82 in the weekly ranking the week of Sep 28, its best in the past year.

    Use Cases & Benefits

    • Provides an open-source IDS/IPS, WAF, and bot detection system with crowdsourced malicious IP blocklisting for Linux, Windows, Docker, and Kubernetes environments.
    • Leverages a community-driven blocklist and modular detection rules to proactively identify and block threats across multiple infrastructure layers.
    • Use for protecting web applications from automated bot attacks and malicious HTTP requests with integrated WAF capabilities.
    • Use for monitoring and blocking network intrusions and suspicious activities on servers using log analysis and real-time remediation.
    • Use for securing containerized and cloud-native environments like Docker and Kubernetes with adaptable detection scenarios and community threat intelligence.

    Should you depend on it?

    License terms, project hygiene and risks, from GitHub metadata and GStars' snapshots.

    License

    MIT

    Permissive: commercial use, modification and redistribution are allowed with attribution.

    Community files

    • README: present
    • Contributing guide: present

    Watch-outs

    No watch-outs from GStars' checks.

    General guidance from repository metadata, not legal advice. How we score

    From the README

    CrowdSec is an open-source and participative security solution offering crowdsourced server detection and protection against malicious IPs. Detect and block with our Security Engine, contribute to the network, and enjoy our real-time community blocklist.

    CrowdSec Security Engine is an all-in-one IDS/IPS and WAF.

    It detects bad behaviors by analyzing log sources and HTTP requests, and allows active remedation thanks to the Remediation Components.

    Detection rules are available on our hub under MIT license.

    Excerpt from the crowdsecurity/crowdsec README on GitHub (MIT license). © its authors.Read the full README on GitHub

    Daily snapshots

    Stars gained per day, and how forks and open issues moved, from GStars' daily snapshots

    Sep 4: +4

    +967 stars over 87 days across 8 snapshot days; best day +4 on Sep 4.

    Forks

    756+62

    Open issues

    301+18

    Compared with peers in Security

    Fastest-growing repositories GStars tracks in this cohort for the week of Nov 8, by 7-day star growth

    crowdsecurity/crowdsec compared with Security repositories by stars, 7-day star growth, health score and last release
    RepositoryStars+7dHealthLast release
    cloudflare/security-audit-skill69.3K+10.7K75—
    vxcontrol/pentagi33.9K+7197536 days ago
    GyulyVGC/sniffnet42.3K+42275111 days ago
    soxoj/maigret39.9K+3326087 days ago
    Asymptote-Labs/agent-beacon3.4K+315751 day ago
    crowdsecurity/crowdsec15.4K—606 days ago
    Category median39.9K+42275—

    Discover Repositories

    Search across tracked repositories by name or description