The deployment of the product is seamless, it's 100% Free Software, and the community is welcoming and reactive Review collected by and hosted on G2.com.

Not much, at the moment, the alerting and event decisions are polling-based. It could be more efficient to have an event-based mechanism to act after alerts are raised directly. Also, the documentation is lacking some details and could be improved. Review collected by and hosted on G2.com.

CrowdSec utilizes information regarding real security incidents to create a platform where every server can benefit from that knowledge and better protect themselves from intrusion. It's easy to install, and very straight-forward. CrowdSec itself keeps an eye on things, and bouncers take action when an incident is encountered. Can greatly enhance server security. Review collected by and hosted on G2.com.

I would like to see additional bouncers created, but the firewall bouncer is versatile enough to be a great start and works with many scenarios. Review collected by and hosted on G2.com.

Efficiency: With Crowdsec, we benefit from community blocklists which allows us to be proactive in terms of protecting our servers.

Ease of installation and configuration: installation and maintenance are facilitated by the repositories (Debian, Ubuntu, etc.). The configuration files are clear and even intuitive.

Ease of use: Being able to configure Crowdsec in Client / Server mode makes it possible to monitor alerts and decisions from a single console, thus avoiding us having to connect to each server. Review collected by and hosted on G2.com.

Currently I have not encountered a problem with this solution. Therefore, it is difficult for me to say what I don't like. If I had to quibble, I would say autocompletion would be a plus for the cscli command. Review collected by and hosted on G2.com.

It's free and open source, easy to install and navigate. Review collected by and hosted on G2.com.

Explain how/why it's free given the increase in cyber criminals, it's hard to believe this is real. Review collected by and hosted on G2.com.

It is written in Go, meaning it is really fast and can be deployed everywhere without having to install dependencies which could be hacked to craft a supply chain attack. By having a single binary we can check signature easily.

A detection can happens on a single machine and all the other machines that have a direct or indirect contact with that machine being under attack can take decisions as well. We have thus some kind of propagation of decisions which is quite welcome in this regard.

If some people are willing to induce false positive results into the IP database, there is a consensus chamber and a system of ranking allowing to avoid this as well. By default, with the community plan, everyone is participating in the IP reputation. An attack being avoided at some location can help another user from another country.

We clearly see the team has been tinking to the problem in a wholistic manner.

On the ecosystem side, we clearly see we won't have any risk of abandonware as the business model is allowing to make the product sustainable without restraining the community. Corporate envs can buy the ability to monitor a huge amount of Crowsec agents, have a SaaS offer and also have the ability to keep their IP reputation private.

Plus the team is super great to discuss with and easily reachable via a chat system, like we used to use in 2021. Review collected by and hosted on G2.com.

While Crowsec is working in IPv6 environments, the IPv6 and IPv6-only environments have not been widely tested, but it is a matter of time before this happens and the docs are updated. Review collected by and hosted on G2.com.

Why wait until an attacker starts remote scanning your services if information about their malicious IPs may be already available? By using the Crowdsec solution, you share information about attacks against your networks and use Crowsec community knowledge to protect your services. If you already have used Fail2Ban - you may describe Crowsec solution as distributed, collaborative Fail2Ban. By using this solution, you participate in everyone's security with other security teams.

Grok patterns, YAML scenarios make this solution quite easy to implement and maintain. Review collected by and hosted on G2.com.

In my opinion - there is nothing to dislike. It works. Review collected by and hosted on G2.com.

With the Crowdsec solution, you can benefit from the community crowdsourcing of threats. In a few months thay already grew to 3500 stars on GitHub. The adoption seems endless. It already covers many types of tech assets. Linux distros like Debian/Ubuntu, CentOs, Amazon Linux, Debian, FreeBSD are covered. They have a Docker image avaible. You can protect AWS or Google Cloud Platform servers, but also a WordPress web site. I can also monitor what is going on with their monitoring (observability) integrations. Finally, it is the best fail2ban alternative as an up-to-date solution using today's technologies. Overall the developer experience is outstanding. Review collected by and hosted on G2.com.

I can't install the CrowdSec solution on all my existing IT assets yet (but I have a very high diversity of them, and CrowdSec introduces new solutions every month). Also, I find the expected awareness of cybersecurity for new users is rather high. Overall there is not much negative to say. Review collected by and hosted on G2.com.

Once we deployed CrowdSec on our servers, all the DDoS attacks were mitigated. We were under attack constantly, and manually banning the IP addresses was getting more complicated every day because the attacks kept getting more significant. CrowdSec made it easy to figure out all the individual IP addresses and get them blocked immediately, bringing our networks back to being stable. Review collected by and hosted on G2.com.

So far haven't found anything I do not like about it yet. Works great Review collected by and hosted on G2.com.

Private cloud and data storage backup. etc.. Review collected by and hosted on G2.com.

Servers, multi-cloud devices, and networking, etc. Review collected by and hosted on G2.com.

The main advantage of this tool is that it feeds on different sources to create a good combination of firewall and intrusion detection systems. It is capable of monitoring any threat that may reach your network in the form of attack or malware using techniques based on threat intelligence. Review collected by and hosted on G2.com.

This is a novel solution that needs to improve specific details, for example, the installation process and usability. It would also be interesting if it were compatible with different platforms. Review collected by and hosted on G2.com.