The CrowdSec Console - Monitor cyber threats on your online services
by•
Connected to the CrowdSec open-source security tool, the Console provides actionable data to visually explore threats, alerts, remediation decisions and get an instant overview of any IP suspicious activity on your services.
Replies
Best
Amazing job @philippe_humeau and Crowdsec Team, congratulations for the hard work!!! #SaferTogether
I presented this solution at work and it is now in testing process. We will start to deploy it on production soon. The console and mainly the organisation feature is great for our clients
@mesquizz glad you mention the organization feature, it is exclusively designed for company needs. We already work with quite some verticals (e-commerce, health, hosting, education, automotive, media). Let's see where it takes us :)
Report
I have been working with both "standalone" versions of CrowdSec since the initial launch and we also onboarded to the crowdsec console early on, this gives us a valuable overview across environments that are not connected to each other, we are looking forward to seeing what the future of the console will bring to protecting our environment and customers
@flemming_riis Thank you Flemming for your outspoken support from our earliest days! Yes we have many of the features planned on the todo list, will arrive soon:
- the "background noise" filter in the list of alerts
- generalized alerts (when we detect abnormal activity
- regular email reports
- the possibility of subscribing agents to other dynamic lists (ex: third party)
- dark mode
and more improvements!
@boris_jacquot The self-hosted version of the console is not in the roadmap, essentially because the console will look for your data in the community database (called the "Smoke DB") which is not even self-hosted. We are thinking about being able to host this base in a community way one day but it is a huge project so we are not going to do it for the moment.
In any case, if you are looking for a self-hosted version, we provide a "metabase dashboard", included in your crowdsec agent (cscli dashboard). But indeed, this version is less complete than the Console because it is based on Metabase and although this tool is excellent, it cannot exactly meet all the needs that the console meets today.
If you want to self-host, it may be for high confidentiality reasons, but in this case, remember that CrowdSec does not share your logs with the community, just who attacked you, when and what scenario triggered the alert.
Thank you again for your support!
Report
I've been using Crowdsec in production (300+ servers) for a year now, it's been really effective. Their new console is great for giving visibility to our production and support teams. Keep it up!
I use CrowdSec as an effective first line of defense for my web services. And the console adds great visualisation aspect to it, it’s really easy to manage all my instances and monitor all the attackers in one place
Replies
CrowdSec
CrowdSec
CrowdSec
CrowdSec
CrowdSec
CrowdSec
CrowdSec
CrowdSec
CrowdSec
CrowdSec
CrowdSec
CrowdSec
CrowdSec
CrowdSec