WPThumbs
Themes Plugins By purpose By industry Best-of lists Fix it guides

CrowdSec

This plugin blocks detected attackers or displays them a captcha to check they are not bots.

CrowdSec

The facts

Rating
5★ from 5
Active installs
2k+
Price
Free
Last updated
9 Jan 2026
Added
Jan 2021
Requires WP
4.9
Tested up to
WP 6.9.7
Requires PHP
7.2
Downloads
60,774

Our analysis

AI-assisted

CrowdSec is a WordPress plugin designed to enhance the security of your site by blocking requests from known attackers. It uses CrowdSec Blocklists Integration to quickly identify and block malicious IPs and can connect to the CrowdSec Security Engine for additional protection features.

The plugin helps you manage security by detecting and blocking brute force attempts and scans. It also provides remediation metrics to assess the effectiveness of the protection measures in place. This plugin is suitable for WordPress site owners looking to bolster their site's security against common threats.

Best for: This plugin is best for WordPress site owners seeking to improve their site's security against attacks.

What it does well

  • Proactively blocks requests from known attackers
  • Quickly block known WordPress attackers in a few clicks
  • Detects and blocks admin brute force attempts
  • Provides remediation metrics for protection efficiency
  • Integrates with existing Blocklist Integrations

Where it falls short

  • Limited information on specific features beyond the description
  • No details on support or updates beyond the last update date

Verdict

CrowdSec offers a straightforward solution for enhancing WordPress security. It is a useful tool for those wanting to mitigate risks from known threats.

From the developer

CrowdSec - lightweight and collaborative security engine's own description of CrowdSec, lightly tidied.

The CrowdSec plugin proactively blocks requests coming from known attackers.
It does so by either directly using CrowdSec Blocklists Integration or by connecting to your CrowdSec Security Engine.

Key Features:

  • Instant CrowdSec Blocklist: Quickly block known WordPress attackers in a few clicks.
  • Detect and block admin bruteforce attempts and scans of your WordPress Site.
  • Remediation metrics: Enabling you to see the efficiency of the protection.
  • (Console Users) Plug any of your existing Blocklist Integrations.
  • (CrowdSec Security Engine Users) Apply decisions and subscribed blocklist of your security engine within WordPress.

You can:

  1. Block aggressive IPs
  2. Display a captcha for less aggressive IPs

Read the full description on the official page →

Tagged as

Alternatives

Other plugins for stopping spam.

Akismet Anti-spam: Spam Protection

The best anti-spam protection to block spam comments and spam in a contact form. The most trusted antispam sol...

Free 5M+ installs 4.7★ (1,186)
Disable Comments

Allows administrators to globally disable comments on their site. Comments can be disabled according to post t...

Free 1M+ installs 4.7★ (280)
Antispam Bee

Sophisticated antispam plugin for effective daily comment and trackback spam-fighting. Built with data protect...

Free 700k+ installs 4.8★ (226)
Advanced Google reCAPTCHA

Captcha protection against spam comments & brute force login attacks using Google reCAPTCHA.

Free 200k+ installs 4.8★ (430)