Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 3 additions & 1 deletion crowdsec-docs/unversioned/blocklists/getting_started.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -5,7 +5,9 @@ title: Getting Started

import ConsolePromo from '@site/src/components/ConsolePromo.js';

There are two ways to get started with Blocklists:
Make sure to read the [Introduction](/blocklists/intro.md) to understand CrowdSec Blocklists, how they work, and their available tiers.

When you're ready, you can get started with Blocklists in two ways:

1. **Security Engine** - Use the CrowdSec Security Engine to ingest blocklists
2. **Integrations** - Use Integrations to ingest blocklists into firewall, CDN, or other security solutions
Expand Down
6 changes: 5 additions & 1 deletion crowdsec-docs/unversioned/blocklists/intro.md
Original file line number Diff line number Diff line change
Expand Up @@ -10,10 +10,14 @@ Welcome to the documentation section dedicated to CrowdSec's Blocklists. This se

## What are CrowdSec Blocklists?

Blocklists are lists of IP addresses that are known to be malicious. These lists are curated by CrowdSec and empower you to block malicious IP addresses from accessing your systems with zero false positives. We outlined in our [CrowdSec Data](https://www.crowdsec.net/our-data) page how we collect and curate these IP addresses to ensure that the data is fresh and free from false positives.
Blocklists are lists of IP addresses that are known to be malicious. These lists are curated by CrowdSec and empower you to block malicious IP addresses from accessing your systems with [zero false positives](#zero-false-positives). We outlined in our [CrowdSec Data](https://www.crowdsec.net/our-data) page how we collect and curate these IP addresses to ensure that the data is fresh and free from false positives.

In most cases you will use these lists to block malicious IP addresses from accessing your systems. However, since it is a feed of IP addresses that are known to be malicious, you can also use it to enrich your SIEM, threat intelligence platform, or any other security tool that you use.

## Zero False Positives

Whilst we check for [Safe Classifications](/cti_api/taxonomy/false_positives.mdx) within **all** blocklist we provide (Third Party, CrowdSec Premium and CrowdSec Platinum), we cannot guarantee that **Third Party** blocklists are free from false positives as the data is not curated by CrowdSec.

## How do CrowdSec Blocklists work?

CrowdSec Blocklists are updated in real time and are available in various formats. We provide Blocklists in different categories such as Industry, Technology (Wordpress, VPN / Proxy) and Threat Intelligence (Botnet, Malware, etc.).
Expand Down