Crowdsec Alternatives
Similar projects and alternatives to crowdsec
-
-
-
-
-
-
-
lynis
Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.
-
setup-ipsec-vpn
Scripts to build your own IPsec VPN server, with IPsec/L2TP, Cisco IPsec and IKEv2
-
Scout APM
Scout APM: A developer's best friend. Try free for 14-days. Scout APM uses tracing logic that ties bottlenecks to source code so you know the exact line of code causing performance issues and can get back to building a great product faster.
-
OSSEC
OSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit detection, real-time alerting and active response.
-
Nginx Proxy Manager
Docker container for managing Nginx proxy hosts with a simple, powerful interface
-
-
crowdsec-honeypot
Contains docker-compose and config files for running a crowdsec-based honeyput using various helper containers.
-
-
masscan
TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes.
-
-
ModSecurity
ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx that is developed by Trustwave's SpiderLabs. It has a robust event-based programming language which provides protection from a range of attacks against web applications and allows for HTTP traffic monitoring, logging and real-time analysis. With over 10,000 deployments world-wide, ModSecurity is the most widely deployed WAF in existence.
-
-
-
-
ansible-collection-hardening
This Ansible collection provides battle tested hardening for Linux, SSH, nginx, MySQL
-
Cloudbox
Ansible-based solution for rapidly deploying a Docker containerized cloud media server.
NOTE:
The number of mentions on this list indicates mentions on common posts plus user suggested alternatives.
Hence, a higher number means a better crowdsec alternative or higher similarity.
Reviews and mentions
Posts with mentions or reviews of crowdsec.
We have used some of these posts to build our list of alternatives
and similar projects. The last one was on 2021-11-28.
-
How secure is Openwrt out of the box?
Hello, it might be low tier question but i really want to know about securing openwrt, specially ssh port. Is it possible to implement Endlessh or CrowdSec (Endlessh preferred) in openwrt?
-
Block GET requests that aren't to my website
I'd like to suggest CrowdSec for this. It's free and open source and based on crowdsourced threat intelligence. Think if it as an advanced version of fail2ban.
-
Even large corporate institutions like McKinsey starts endorsing open-source...
I can totally relate to that as I also work at an open source project called CrowdSec. I really find it satisfying to support the community by giving them a good tool for free, no strings attached.
-
Help! Left a SSH server with weak password&username. Checked logs and I'm getting brute forced.
I'll suggest CrowdSec instead. It's free, open source and crowdsourced threat intelligence based IPS and IDS (and much more). Basically one of the ideas behind it was to create a modern version of fail2ban in that it's based on crowdsourced threat intelligence and capable of taking much more advanced decisions. The crowdsourced part means that it - like f2b parses logfiles and detects attacks. Then it sends anonymized, basic intelligence about those attacks to the rest of the ecosystem and downloads relevant blocklists so that bad guys are blocked before they get the chance to attack. On top of that it can detect portscannings and all sorts of ressource abuse like botscraping, creditcard stuffing, data exfiltration, and various web-attacks and block those attacks either on L3 or L7 using host firewalls or blocking directly in applications like wordpress, php web apps in general, nginx, Cloudflare or others. The sky is literally the limit here.
Therefore I'll suggest looking into CrowdSec as an alternative. It's free, open source and crowdsouced and meant as a modern alternative to f2b; written in go so it's fast and capable of taking much more advanced decisions so that it can detect and prevent all sorts of resource abuse like L7 DDoS attacks (and prevent free anti-DDoS on Cloudflare), data exfiltration, bot scraping, credit card stuffing and much more.
-
An actual secure selfhosted Reverse Proxy with cool stats?
I would recommend looking at a tool like CrowdSec for that. You don't mention whether using traefik is a must or not but nginx is better supported (and traefik support is on it's way).
-
Turning my raspberry pi into a web server (on the internet). Question about security.
Would you consider installing CrowdSec on your Amazon VPS instead? I ask because CrowdSec's using crowdsourced threat intelligence (and is free, open source and basically works as a modern and more advanced version of fail2ban) so I would really want you to donate your attack data. That could be really useful to the project.
-
What are the best ways to prevent someone from hacking into your VPS?
Depending on what you want to do with your VPS, it might make sense to take a look at CrowdSec, which is free, open source, crowdsourced threat intelligence. Think of it as an improved and modern version of fail2ban (even though it can do so much more). The really cool thing about it is that is (anonymously) shares threat intelligence from all users so that attackers attacking others in the ecosystem will be automatically blocked. It does what you would expect fail2ban to do but has much more advanced logic and is capable of detecting abnormal behavior (using rulebased approach, no AI/ML ftw). That is a bit fluffy but it means that exfiltrating data, botscraping, DDoS and much more can also be detected and blocked either on L3 via host firewall (iptables, nftables or pf) or on L7 via nginx, cloudflare, wordpress, any php app and more.
-
Wordpress failed login attempt on every user!
You could also try out CrowdSec; crowdsourced threat intelligence meant as a modern version of f2b sharing all user's collective threat intelligence by default and capable of doing much more intelligent decsisions like detect DDoS attacks and other sorts of abuse. The built-in Wordpress support protects wp-admin by default and is capable of 'flex blocking' e.g. forcing suspicious users through a CAPTCHA (rather than hard-blocking them).
-
Mailx SMTP settings location
I would say it depends on your threat analysis. If you’re afraid of anyone abusing your sendmail for spamming purposes I would say that you’re good to go. If you want to protect it towards a number of other threats, exploiting and god knows what you need something else, for instance CrowdSec which is a modern version of f2b using crowdsourced threat intelligence (and being way more advanced). Parsing postfix logs are supported out of the box (spammers are detected too) - so is blocking abuse via the host firewall on Linux and FreeBSD. Disclaimer: I am head of community at CrowdSec and an avid user myself. If you’re interested and wants to know more, please let me know. I’ll be more than happy to help you out in any way I can.
-
security: is renaming wp-admin effective?
CrowdSec could also do the trick - for free using open source. Disclaimer: I am head of community at CrowdSec and an avid user myself. If you’re interested to know more, let me know and I’ll be happy to help you out.
I would also recommend CrowdSec with a Wordpress bouncer. I am head of community at CrowdSec and an avid user myself. CrowdSec is free, open source crowd sourced threat intelligence and meant to be a modern version of fail2Ban but ended up being so much more - among others native support for Wordpress, free to use.
-
Please help with given task
I would definately suggest taking a look at CrowdSec also. It’s free and open source crowd sourced threat intelligence. In plain english it means that it’s a modern version of fail2ban that is able to do more advanced decisionmaking (like determining what is ‘normal’ webtraffic and block the rest). The crowd sourced part means that when it parses your log (same thing f2b does btw) it shares anonymized data on the attacks you’re seeing with the other CrowdSec users. Also it has a module for Cloudflare capable of providing you with free anti-DDoS on L7. Read about it here. And much more!
-
Cloudflare privacy conscious alternatives?
Thanks for mentioning CrowdSec here :-) It happens more and more so I guess we're doing something right.
-
How do I protect against these intrusion attempts?
I would definately suggest taking a look at CrowdSec here. The original intention was to create a modern version of fail2ban - but is so much more. Let me try to explain how and what that means.
Stats
Basic crowdsec repo stats
57
4,008
9.2
9 days ago
crowdsecurity/crowdsec is an open source project licensed under MIT License which is an OSI approved license.
Popular Comparisons
SaaSHub - Software Alternatives and Reviews
SaaSHub helps you find the best software and product alternatives
www.saashub.com
Are you hiring? Post a new remote job listing for free.