diff --git a/crowdsec-docs/unversioned/blocklists/getting_started.mdx b/crowdsec-docs/unversioned/blocklists/getting_started.mdx index 25973194f..6054db6b9 100644 --- a/crowdsec-docs/unversioned/blocklists/getting_started.mdx +++ b/crowdsec-docs/unversioned/blocklists/getting_started.mdx @@ -5,7 +5,9 @@ title: Getting Started import ConsolePromo from '@site/src/components/ConsolePromo.js'; -There are two ways to get started with Blocklists: +Make sure to read the [Introduction](/blocklists/intro.md) to understand CrowdSec Blocklists, how they work, and their available tiers. + +When you're ready, you can get started with Blocklists in two ways: 1. **Security Engine** - Use the CrowdSec Security Engine to ingest blocklists 2. **Integrations** - Use Integrations to ingest blocklists into firewall, CDN, or other security solutions diff --git a/crowdsec-docs/unversioned/blocklists/intro.md b/crowdsec-docs/unversioned/blocklists/intro.md index ffc546af6..48ea23c86 100644 --- a/crowdsec-docs/unversioned/blocklists/intro.md +++ b/crowdsec-docs/unversioned/blocklists/intro.md @@ -10,10 +10,14 @@ Welcome to the documentation section dedicated to CrowdSec's Blocklists. This se ## What are CrowdSec Blocklists? -Blocklists are lists of IP addresses that are known to be malicious. These lists are curated by CrowdSec and empower you to block malicious IP addresses from accessing your systems with zero false positives. We outlined in our [CrowdSec Data](https://www.crowdsec.net/our-data) page how we collect and curate these IP addresses to ensure that the data is fresh and free from false positives. +Blocklists are lists of IP addresses that are known to be malicious. These lists are curated by CrowdSec and empower you to block malicious IP addresses from accessing your systems with [zero false positives](#zero-false-positives). We outlined in our [CrowdSec Data](https://www.crowdsec.net/our-data) page how we collect and curate these IP addresses to ensure that the data is fresh and free from false positives. In most cases you will use these lists to block malicious IP addresses from accessing your systems. However, since it is a feed of IP addresses that are known to be malicious, you can also use it to enrich your SIEM, threat intelligence platform, or any other security tool that you use. +## Zero False Positives + +Whilst we check for [Safe Classifications](/cti_api/taxonomy/false_positives.mdx) within **all** blocklist we provide (Third Party, CrowdSec Premium and CrowdSec Platinum), we cannot guarantee that **Third Party** blocklists are free from false positives as the data is not curated by CrowdSec. + ## How do CrowdSec Blocklists work? CrowdSec Blocklists are updated in real time and are available in various formats. We provide Blocklists in different categories such as Industry, Technology (Wordpress, VPN / Proxy) and Threat Intelligence (Botnet, Malware, etc.).