CrowdSec

CrowdSec is built to maximize security efficiency and lower costs through the power of crowd intelligence. The service offers actionable blocklists to proactively block known attackers' IP addresses, reducing service downtime and data loss. That means security teams can concentrate on important events, not background noise, and cut the number of security alerts by up to 80% at the SOC level.

CrowdSec's advantage is that it gathers real-world data from real-world users and servers in the wild, not in a lab, which means better quality and variety. Its growing community of more than 70,000 active users in 190 countries contributes an average of 10 million signals about aggressive IPs each day. To protect data quality, CrowdSec uses techniques like reporter trust scores, machine profiling and cross-validation of data sources to reduce false positives and poisoning.

Some of its features include:

• Ultra-Curated Data: Rich context about IP behavior, including DDoS, botnets, VPNs and residential proxies.
• Real-Time Updates: Average 5% daily rotation of IPs so security teams can respond rapidly to new threats.
• Integration Flexibility: Easy integration with existing firewalls and CDNs.
• IP Aggressiveness: A score indicating the severity of malicious behavior.
• Attack Details: A summary of specific attack patterns associated with an IP.
• Location Origin: The country where an IP address is registered.
• Top Targeted Countries: The countries most often targeted by an IP.

CrowdSec has several pricing options to accommodate different needs:

• SaaS Enterprise Plan: $31/month per workload, including real-time crowdsourced blocklist updates, unlimited premium blocklists and centralized management.
• Blocklists Subscription: $3,900/month, including real-life crowdsourced updates and unlimited premium and platinum blocklists.
• Threat Intelligence Subscription: Starting at $200/month through an API, including crowdsourced intelligence and contextualized data.

For security teams looking to improve their threat hunting and lower operational costs, CrowdSec provides valuable insights and proactive measures to protect systems.

Published on June 25, 2024