CrowdSec
This plugin blocks detected attackers or displays them a captcha to check they are not bots.
Use with caution
CrowdSec works, but test it on a staging site before relying on it in 2026. It runs on 2K+ sites, is rated 5/5 and was last updated 9 months ago, and scores 44/100 on our health check.
- Only tested up to WordPress 6.9 (latest is 7.1)
How does it stack up?
Side-by-side on installs, updates, ratings & support
Daily downloads
Download spikes usually follow a new release — each site that auto-updates counts as a download.
Rankings
Where CrowdSec stands todayWordPress.org search rankings
Live position in the plugin search, top 100| Keyword | Position |
|---|---|
| captcha | >100 |
| crowdsec | #1 |
| hacker-protection | #10 |
| ip blocker | #18 |
| security | >100 |
Version adoption
Share of active sites per release.
Rating breakdown
★★★★★★★★★★ 5 from 5 reviews
About CrowdSec
From the official readme · v2.13.1Description
The CrowdSec plugin proactively blocks requests coming from known attackers.
It does so by either directly using CrowdSec Blocklists Integration or by connecting to your CrowdSec Security Engine.
Key Features:
- Instant CrowdSec Blocklist: Quickly block known WordPress attackers in a few clicks.
- Detect and block admin bruteforce attempts and scans of your WordPress Site.
- Remediation metrics: Enabling you to see the efficiency of the protection.
- (Console Users) Plug any of your existing Blocklist Integrations.
- (CrowdSec Security Engine Users) Apply decisions and subscribed blocklist of your security engine within WordPress.
You can:
- Block aggressive IPs
- Display a captcha for less aggressive IPs
Installation
Check Full Documentation for more details
Multiple ways you can use the plugin
– Instant WordPress Blocklist – easiest
– Blocklist as a Service Integration – your blocklist catalog
– Connect it to your CrowdSec Security Engine – advanced & most complete
Frequently asked questions
Do I need to install CrowdSec Security Engine?
Not necessarily, you can connect it directly to a CrowdSec Blocklist Integration endpoint Via Instant WordPress Blocklist Or Blocklist as a Service Integration You can of course connect it to a security engine if you have one
Changelog
If you are using the Multisite WordPress feature, CrowdSec Bouncer plugin has to be Network activated and CrowdSec settings have to be set in the Network admin.
2.13 (2025-12-12)
- Allow sending remediation metrics even with a Blocklist as a Service (BLaaS) LAPI
2.12 (2025-12-05)
- Remove Blocklist as a Service (BLaaS) subscription button
2.11 (2025-06-02)
- Add Blocklist as a Service (BLaaS) subscription button
2.10 (2025-05-09)
- Add Usage Metrics table in UI
- Handle BLaaS LAPI specific behavior
2.9 (2025-02-21)
- Add usage metrics support
2.8 (2024-12-13)
- Disable “Public Website only” setting by default
Screenshots
For developers
Is this your plugin? Show off the numbers.
Add a live badge to your site, docs or GitHub README. It updates on its own — no account needed.
Best CrowdSec alternatives
All captcha plugins →
FAQ
CrowdSec: quick answers
Straight answers, pulled from live WordPress.org data.
Live data from WordPress.org · checked Sep 27, 2026
Is CrowdSec free?
Yes. CrowdSec is free to download and use from the official WordPress.org plugin directory.
Is CrowdSec safe to use in 2026?
CrowdSec works, but test it on a staging site before relying on it in 2026. It runs on 2K+ sites, is rated 5/5 and was last updated 9 months ago, and scores 44/100 on our health check.
How many websites use CrowdSec?
CrowdSec is active on 2K+ WordPress websites and has been downloaded 61,270 times since it launched in January 2021. It was downloaded 497 times in the last 30 days.
Does CrowdSec work with WordPress 7.1?
CrowdSec is officially tested up to WordPress 6.9.9, while the latest release is 7.1.2. It may still work, but try it on a staging site first.
What PHP version does CrowdSec need?
CrowdSec requires PHP 7.2 or higher. Most hosts run PHP 8.x today, so it works on any modern WordPress hosting.
When was CrowdSec last updated?
The latest version, 2.13.1, was released on January 9, 2026 (9 months ago).
Who makes CrowdSec?
CrowdSec is developed and maintained by CrowdSec - lightweight and collaborative security engine.
What are the best alternatives to CrowdSec?
The most popular alternatives to CrowdSec are SiteGuard WP Plugin (600K+ installs), CF7 Apps (300K+ installs) and Really Simple CAPTCHA (300K+ installs).
Powered by PageForge
Want thousands of pages that rank like these? Build them in an afternoon.
This directory runs on the same engine as PageForge. Turn any spreadsheet, CSV or API into thousands of fast, SEO-ready WordPress pages — with schema, internal links and AI-written copy baked in.
- CSV, Google Sheets & API data sources
- AI content, schema & internal links per page
- Works with Elementor, Gutenberg, Yoast & Rank Math
- Free on WordPress.org — no credit card
