CrowdSec Blocklists offers a powerful, crowd-powered cybersecurity solution that helps organizations proactively defend against malicious IPs, mass exploitation attempts, and zero-day attacks. Designed for security operations centers, IT teams, and managed security service providers, it delivers real-time, ultra-curated blocklists sourced from a global network of hundreds of thousands of servers, situated in 5000+ Autonomous Systems and 170 countries.
AWS WAF add-on protections, configured in 3 clicks
Compatible with all platforms and cloud systems
Can be used with EntraID/Azure, SIEM, SOAR, Firewalls, Cloudflare, Fastly and more
Provides actionable, industry and country-specific blocklists with detailed attacker behavior context
Automatically updates blocklists daily with a 5% IP rotation to ensure up-to-date protection
Reduces security alert volume by up to 80%, minimizing alert fatigue and operational costs
Blocks up to 95% of mass exploitation attempts before they reach your infrastructure
Ensures zero false positives through advanced curation methods, including reporter trust scores and machine profiling
Integrates seamlessly with any firewall or CDN, including AWS Network Firewall, Azure Firewall, Google Cloud Platform, Cloudflare, Palo Alto, Cisco, Fortinet, and more
Supports plug-and-play deployment with automated API-based blocklist updates for immediate benefits
By leveraging collaborative threat intelligence from real users rather than honeypots, CrowdSec Blocklists offers unique, trustworthy data that stays significantly ahead of competitors. This solution optimizes incident response, reduces server load and egress costs, and protects revenue by minimizing downtime and data loss. Its flexible, open-source security engine is infrastructure-agnostic, making it easy to integrate into diverse environments and enhance your existing security posture with confidence.
Highlights
Real-time crowd-powered blocklists sourced from hundreds of thousands of servers worldwide for proactive threat defense
Zero false positives ensured by advanced curation and machine profiling
Seamless integration with major firewalls and CDNs for automated, plug-and-play deployment
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing is based on the duration and terms of your contract with the vendor. This entitles you to a specified quantity of use for the contract duration. If you choose not to renew or replace your contract before it ends, access to these entitlements will expire.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
All CrowdSec blocklists for SMB size accounts (less than 250 employees). Unlimited use within the AWS account. More than 30 blocklists available, sorted by industries, countries, type, activities, etc.
$2,083.00
Blocklists_Medium
All CrowdSec blocklists for Medium size accounts (less than 5000 employees). Unlimited use within the AWS account. More than 30 blocklists available, sorted by industries, countries, type, activities, etc.
$4,167.00
Blocklists_Corporation
All CrowdSec blocklists for Large size accounts (more than 5000 employees). Unlimited use within the AWS account. More than 30 blocklists available, sorted by industries, countries, type, activities, etc.
You choose one plan based on your organization's size. Blocklists_SMB fits accounts with fewer than 250 employees. Blocklists_Medium fits accounts with fewer than 5000 employees. Blocklists_Corporation fits accounts with more than 5000 employees. All three give the same access: every blocklist, more than 30 in total, sorted by industry, country, type, and activity. Each plan allows unlimited use within your AWS account. Pricing scales by company headcount, not by usage or endpoint count. Pick the tier matching your employee band.
Top-of-mind questions for buyers
How do I know which employee band applies, and what if my headcount crosses a tier boundary?
Your plan matches your organization's employee count. Blocklists_SMB covers accounts under 250 employees. Blocklists_Medium covers accounts under 5000 employees. Blocklists_Corporation covers accounts above 5000 employees. If your headcount grows past a band, you move to the plan matching your new size.
Does the number of endpoints or servers I protect change my cost?
No. Each plan allows unlimited use within your AWS account. You can apply the blocklists to any number of endpoints across your company without extra charges. Cost is set by your employee band, not by how many devices or servers you protect.
What do I actually get access to across all three plans?
Each plan gives access to more than 30 blocklists, sorted by industry, country, type, and activity. These include lists targeting attackers by sector, botnet actors, proxy and VPN traffic, and automated crawlers. The blocklists update frequently and reflect active malicious IPs sourced from ongoing attacks.
Tell us how we can improve this page, or report an issue with this product.
Give us feedbackReport a problem with this product or seller
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA).
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Buyers can expect help via email or through our website for general inquiries, troubleshooting, and product guidance.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
This product has charges associated with it for seller support. CrowdSec is an open source, collaborative security platform that detects and mitigates cyber threats using behavior analysis and a shared threat intelligence network.
CrowdSec Security Engine provides a real-time, collaborative WAF / WAAP & IDS. When they block an IP address that attacked the protected workloads, that IP is curated and shared with all your other servers and every other network member to further protect everyone. It leverages open-source intelligence from a global user network to protect your infrastructure and applications. The WAF and IDS are provided as FOSS, along with their detection scenarios, virtual patches, and WAF rules. The Premium SaaS console provides extra security, compliance, QoL, centralisation, reporting, data retention and multi tenancy features.
CrowdSec delivers real-time, crowd-powered threat intelligence, with exclusive data and automated integration, to preemptively block cyberattacks and reduce alert fatigue. Know which CVE is trendy, where, when and why in real time. Sort out noise for emergency using our API.
Be the first to review this product. We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.