Skip to main content
← Back to Documentation
Security Engine

Security Engine

Detect and block malicious behavior in real time. The Security Engine analyzes your logs with behavior-based scenarios, shares intelligence with the CrowdSec community, and powers automated remediation and AppSec protection.

Installation

Choose your platform to install the Security Engine. Each guide covers setup, configuration, and enrolling in the CrowdSec Console to sync decisions and metrics.

Single Server

Deploy on a single host or service for fast detection and blocking.

Linux
Windows
FreeBSD
macOS
Docker
Kubernetes
OPNSense
OPNsense
pfSense
pfSense
WHM
Installation Healthcheck

Verify your installation is working correctly

*Logos and trademarks are property of their respective owners.

Multi-Server

Scale detection across fleets with centralized alerts or logs.

Central LAPI

Use a single LAPI to aggregate alerts and distribute decisions.

Log Centralization

Centralize logs from multiple servers to run detection in one place.

Key Capabilities

Explore the core capabilities you can enable right after install.

📊

Parsers & Scenarios

Learn how CrowdSec parses logs and detects threats with community-maintained scenarios.

Remediation Components

Remediation Components

Block threats at firewalls, web servers, and CDNs with remediation components.

📱

Console Integration

Connect to the CrowdSec Console for centralized management, alerts, and analytics.

AppSec / WAF

AppSec / WAF

Protect web applications from OWASP Top 10 risks and custom attack patterns.

After Installation

Guides to tune detection, manage decisions, and keep the engine healthy.

✅

Post-Installation Checklist

Essential steps after installing the Security Engine

💻

CLI Reference

Complete cscli command documentation

⚙️

Configuration

Fine-tune your Security Engine settings

🔧

Troubleshooting

Common issues and how to resolve them

Need Help?

Get answers fast in Discord or jump straight to troubleshooting.