Skip to content

Commit 3929d8c

Browse files
committed
up
1 parent f059b04 commit 3929d8c

File tree

1 file changed

+11
-4
lines changed

1 file changed

+11
-4
lines changed

crowdsec-docs/docs/intro.mdx

Lines changed: 11 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -15,6 +15,14 @@ import AcademyPromo from '@site/src/components/AcademyPromo';
1515

1616
-->
1717

18+
# Security Engine Overview
19+
20+
The [CrowdSec Security Engine](https://github.com/crowdsecurity/crowdsec) is an open-source, lightweight software that detects and blocks malicious actors from accessing your systems at various levels, using log and HTTP Requests analysis with threat patterns called scenarios.
21+
22+
CrowdSec is a modular security tool offering [behavior-based detection](https://app.crowdsec.net/hub/collections), including [AppSec rules](https://app.crowdsec.net/hub/appsec-rules), and optional components to block threats called [Remediation Components](https://app.crowdsec.net/hub/bouncers)
23+
24+
 
25+
 
1826
<div style={{display: 'flex'}}>
1927
<div style={{textAlign: 'center', flex: '1'}}>
2028
<img width="800" height="auto" src={useBaseUrl('/img/simplified_SE_overview.png')} />
@@ -23,12 +31,9 @@ import AcademyPromo from '@site/src/components/AcademyPromo';
2331
&nbsp;
2432
&nbsp;
2533

34+
The crowd-sourced aspect allows the sharing of attacks they detected and blocked. Participants of this crowd-sourced threat intel receive, automatically via the security engine, a curated list of validated attackers (community blocklist) enhancing their real-time protection capabilities by taking preemptive actions against known threats.
2635

27-
The [CrowdSec Security Engine](https://github.com/crowdsecurity/crowdsec) is an open-source, lightweight software that detects and blocks malicious actors from accessing your systems at various levels, using log and HTTP Requests analysis with threat patterns called scenarios.
28-
29-
CrowdSec is a modular security tool offering [behavior-based detection](https://app.crowdsec.net/hub/collections), including [AppSec rules](https://app.crowdsec.net/hub/appsec-rules), and optional components to block threats called [Remediation Components](https://app.crowdsec.net/hub/bouncers)
3036

31-
The crowd-sourced aspect allows the sharing of attacks they detected and blocked. Participants of this crowd-sourced threat intel receive, automatically via the security engine, a curated list of validated attackers (community blocklist) enhancing their real-time protection capabilities by taking preemptive actions against known threats.
3237

3338
## Main Features
3439

@@ -62,6 +67,8 @@ Under the hood, the Security Engine has various components:
6267
- And with the [Central API](/central_api/intro.md) to share alerts and receive blocklists.
6368
- The [Remediation Components](/u/bouncers/intro) - also known as bouncers - block malicious IPs at your chosen level—whether via IpTables, firewalls, web servers, or reverse proxies. [See the full list on our CrowdSec Hub.](https://app.crowdsec.net/hub/remediation-components)
6469

70+
## Deployment options
71+
6572
This architecture allows for both simple/standalone setups, or more distributed ones including as illustrated below:
6673

6774
- One or more machines? Run crowdsec on each (alongside with a remediation component)

0 commit comments

Comments
 (0)