CrowdSec Hosting Live In 5 Minutes

CrowdSec hosting runs a Local API that collects detections and serves block decisions to your bouncers: detect here, remedy there. Deploy CrowdSec v1.8.1 as a self-hosted security engine: xCloud runs the pinned image, pre-registers a bouncer with a generated API key, keeps decisions and configuration on persistent volumes, and receives the Community Blocklist by default. It detects locally only once you add log sources.

Deploy your CrowdSec

No terminal
No technical skills needed
No lock-in, cancel anytime

What is CrowdSec?

Self-hosted CrowdSec is a security engine. Its README calls it an open-source and participative security solution offering crowdsourced server detection and protection against malicious IPs: the Security Engine is an all-in-one IDS, IPS and WAF that detects bad behaviour by analysing log sources and HTTP requests, and remediation components, called bouncers, act on its decisions, following a detect here, remedy there approach. Detection rules on its Hub are MIT licensed. It is used in place of paid IP reputation feeds or per-host scripts.

On xCloud the template runs the crowdsecurity/crowdsec v1.8.1 image as one container pinned by immutable digest, with crowdsec_data and crowdsec_config volumes. The Local API is published on a dedicated server TCP port as plain HTTP, with no web UI and no domain, and a bouncer named default is registered with a generated key. It registers with the CrowdSec Central API by default.

From Sign-Up to a Live CrowdSec Local API In Just 3 Easy Steps

Self-hosting CrowdSec normally means a Docker host, hub-content bootstrap and a bouncer registration step before the first decision is served. This is the same result without assembling any of it.

Step 01
Sign Up
Create your xCloud account and pick CrowdSec from the OneClick catalog. There are no extra fields — xCloud generates the Bouncer API Key.
Step 02
We Deploy It For You
One click. We bring up the pinned CrowdSec v1.8.1 image, register the default bouncer with a generated API key, and publish the Local API on a dedicated server port.
Step 03
Connect A Bouncer
Point a bouncer at the Local API URL with the Bouncer API Key, then mount log sources and configure acquisition so CrowdSec has something to analyse.

Everything CrowdSec Does, On Your Own Server

The CrowdSec Security Engine runs in full here — detection, decisions and the Community Blocklist, on infrastructure you control.

Central Local API
Bouncers — firewall, reverse proxy, CDN — query one Local API for block decisions, decoupling detection from remediation.
Community Blocklist
Registered with the CrowdSec Central API by default: share signals, receive the curated list of malicious IPs. Opt out any time.
Hub Detection Scenarios
Detect brute force, port scans, web scans and more from the CrowdSec Hub — add collections such as crowdsecurity/nginx or crowdsecurity/sshd.
Pre-Registered Bouncer
A bouncer named 'default' is ready with a generated API key from first boot — no manual cscli bouncers add step.
An Alternative To fail2ban
Decouples detection from remediation and lets remote agents report into one central place instead of each host acting alone.
Survives A Restart
Decisions, configuration and credentials all survive an xCloud Restart — verified: the key was not re-registered.

Everything You Need To Run Your Security Engine 24/7

Managed hosting for CrowdSec, so the parts that keep it online are not your problem.

CrowdSec v1.8.1 deployed instantly
Bouncer API key generated for you
Community Blocklist enabled by default
Automatic server backups
Security updates included
30+ server locations
Unused balance refunded

What You Can Do With CrowdSec

Serve block decisions to many bouncers
Point your firewall, reverse proxy or CDN bouncers at one Local API, so detection and remediation are decoupled and every host benefits from the same decisions.
Receive the Community Blocklist
Registered with the Central API by default, your install shares signals and receives the curated list of malicious IPs, which you can opt out of with DISABLE_ONLINE_API=true.
Detect attacks from your own logs
Mount log sources and configure acquisition, then add Hub collections such as crowdsecurity/nginx or crowdsecurity/sshd to detect brute force, port scans and web scans on your servers.
Collect reports from remote agents
Connect agents on other machines so they report into one central place instead of each host acting alone, which is the centralised model the README describes.

CrowdSec vs Alternatives

Paid IP reputation feeds: A paid feed sells you a list. CrowdSec's README describes a participative network where users share signals and receive a Community Blocklist, plus detection on your own logs, running on your own Cloud VPS.
fail2ban: CrowdSec separates detection from remediation and shares signals, so decisions made on one machine can block at a firewall or proxy elsewhere.
BunkerWeb: BunkerWeb has its own xCloud template. CrowdSec is a detection and decision engine that needs bouncers to enforce its decisions.
Wazuh: Wazuh has its own xCloud template. CrowdSec here is the Security Engine and Local API only, with no web UI.

Simple Pricing. Everything Included.

Dedicated Cloud VPS sizes, pre-configured for CrowdSec hosting. Pick the one that fits, and resize any time.

Cloud VPS 6 GB

Cloud VPS 16 GB

More log sources and higher decision volume.

$59.99per month

16 GB RAM
6 vCPU cores
200 GB NVMe SSD
30 TB
Unlimited

Get started

Cloud VPS 24 GB

CrowdSec alongside a whole self-hosted stack.

$84.99per month

24 GB RAM
8 vCPU cores
300 GB NVMe SSD
30 TB
Unlimited

Get started

CrowdSec is free and open source under the MIT license; this is the managed server it runs on. The template manifest asks for 1 CPU core, 512 MB of RAM and 2 GB of disk. This page sells the 6 GB tier. Every size is a dedicated Cloud VPS we provision, patch, monitor and restore.

Managed hosting

Already Have a Server? Bring Your Own

Connect any VPS — DigitalOcean, Vultr, Linode, AWS, Hetzner or bare metal — and deploy CrowdSec on it through the same panel, for a per-server management fee instead of a Cloud VPS rental.

Free

Start your journey without cost.

$0forever

1 server
10 sites

Start free

Starter

Professional

The same platform, discounted at 6–10 servers.

$4per server / month

6–10 servers
Unlimited sites
All features included
Bring any VPS provider

Get started

Agency

The same platform, discounted at 11+ servers.

$3per server / month

11+ servers
Unlimited sites
All features included
Bring any VPS provider

Get started

Priced per connected server, so your rate adjusts automatically as you add or remove servers. You pay your own provider for the server itself.

Self-managed hosting

Ready To Detect Threats On Your Own Server?

CrowdSec on xCloud runs on a dedicated Cloud VPS that we provision, patch, monitor and restore. Deploy faster. Own your detections and decisions. Stay in control.

Fast Provisioning
Deploy faster using an xCloud Managed Server built with optimized stacks and high-speed SSDs.
Enterprise-grade security
Protect your infrastructure with a free SSL certificate and more advanced security features at no additional cost.
Intuitive Control Panel
From Server creation to application deployment, everything can be managed from our intuitive control panel.

Hear what people are saying about us

See why agencies, developers, startups, and growing businesses choose xCloud to power their projects.

xCloud works really well, I am surprised by its performance being this the release version, I have tried many paid platforms such as runcloud, cloudpages or serveravatar, as well as free platforms such as CyberPanel, CloudPanel or Hestia Control Panel and direct competitors such as SpinupWP and FlyWP. Of all those that I have tried, the platform that works best for WordPress is SpinupWP and I believe that xCloud can reach and surpass that development, its roadmap is promising. Congratulations to the xCloud team, I hope they become the leading platform in the segment, it has all the potential to achieve it!

Brian Geovanny

I've been with runcloud for the last 3 years. However, after trying xcloud for the last month, I'm switching over. They are on a roll with their setup.

Kevin Pineda

I'm moving my servers to xCloud, a cloud control panel by M Asif Rahman and the WPDeveloper team. Their roadmap looks interesting and no, there are no team mates nor API limits with xCloud! #xCloud #wordpress #hosting

Leo Koo

How Cloud Nine Web Elevated Client Experience While Streamlining Hosting Operations using xCloud

Ed Ellingham

xCloud is like having an expert server team on call — without the big agency costs. It's given me back my time and given my clients peace of mind. Highly recommended for freelancers and small teams who want reliable performance and security.

Dumitru Butucel

xCloud isn't just a solution. It's like one of that friend who got your back when you screw things up pretty bad.

Waqar Ahmed

Trust me when I say, once people explore the potential of xCloud they gonna switch from other panels, just keep delivering the best tech, lots of love for the team 😍😍

Rahul Singh

So far my experience has been smooth like silk. I didn't imagine that configuring and managing a VPS would be so easy. As of today, I have deployed 8 sites. The support is good, and they treat users with respect, even if they ask stupid questions (myself included). For the future, I hope for greater flexibility in scheduled backups and more comprehensive and consistent documentation. I'm sure that within a few months, xCloud will become the leader in its segment. This community is amazing, and the Staff here is super helpful.

Massimo Villa

Came from cloudways then to runcloud then to xcloud. Looks like I'm staying here.

Gerson El

I've recently taken all of my Vultr-hosted sites and gotten rid of cPanel for them to substitute it with xCloud. I have to say, I'm really impressed with xCloud so far! The interface is definitely the standout feature for me.

Tony Lewis

I came from Cloudways and won't go back. Highly impressed with xCloud. Glad I gave them a chance.

Jared McDowell

I like xCloud better than RunCloud, but one thing I'll point out is that some years ago RunCloud was hungry for business, the support was outstanding, and the community was active and helped each other. Maybe it was sold, there was a change in management, or they stopped being hungry, but the quality of the RunCloud offering declined and it hasn't been moving forward quickly. My point is that currently the xCloud team has the edge and it is theirs to keep or lose

David McCan

How Kevin Heinrichs Cut Hosting Costs by 84% While Running WooCommerce & Node.js Sites Efficiently

Kevin Heinrichs

I had 150 sites on cloudways and am in the process of moving them to xcloud. Much faster and better priced.

Dan Spinoza

Dear xCloud Team, I have been using xCloud for some time now and am genuinely impressed with its capabilities and the flexibility it offers by allowing users to bring their own VPS for management. It's a fantastic service, and my experience so far has been very positive. Successful migrated 5 sites on a single server. Xcloud migration tool worked great. There were few hiccups with security plugin like MalCare but disabling the plugin prior to migration worked just fine.

Rahil Maknojia

Came from runcloud. Tried xcloud and never came back.

Karl Fanega

How Advanced Web Strategies Saved Over $2,000 & Recovered 56 Hours per Month Managing 70+ Client Websites

Gary Moody

xCloud gave me what no other hosting platform could: the flexibility of a VPS with the convenience of managed WordPress. As a solo founder running an entire business on one server, that combination is an important unfair advantage.

Jorge de los Reyes Martínez

I use Server Avatar and xCloud and I'll sooner use xCloud than Server Avatar personally.

Jay Pagano

How Newman Web Solutions Ensured Perfect Uptime and Seamless Scaling For 120+ WordPress Sites with xCloud

Lori Newman

I too have moved over to xCloud. It's pretty sweet. One click n8n and uptime Kuma apps

John Aperture

I went from Cloudways to xCloud. No intention on switching in the foreseeable future.

Blaine Moore

Frequently Asked Questions

Feel free to contact us with any questions or concerns you may have.

How much RAM does CrowdSec need?

The manifest sets CrowdSec's floor at one core, 512 MB of RAM and 2 GB of disk, and QA measured about 75 MB idle, growing once log sources are mounted. The 6 GB Cloud VPS sold on this page leaves plenty of room as you add acquisition and Hub collections.

Is CrowdSec free and open source?

Yes. CrowdSec is MIT licensed, per the LICENSE at the v1.8.1 tag, and its Hub detection rules are MIT too. There is no licence fee for the engine. xCloud bills only for the dedicated Cloud VPS. The separate Console is an optional enrolment with its own terms.

Can you run CrowdSec with Docker?

Yes, and this is CrowdSec Docker hosting prepared for you: the template runs the official crowdsecurity/crowdsec v1.8.1 image as one container, pinned by immutable digest, with crowdsec_data and crowdsec_config volumes and the Local API on its own server port. No compose file is yours to write.

What does CrowdSec do differently from fail2ban?

Per its README, CrowdSec takes a detect here, remedy there approach: it analyses logs from several sources in one place, and bouncers block at a firewall, reverse proxy or CDN on another machine. Users also share the threats they face, feeding the Community Blocklist.

How do I connect a bouncer to a hosted CrowdSec Local API?

Use the Local API URL and the Bouncer API Key from your installation credentials; the key belongs to the pre-registered default bouncer, so no cscli bouncers add step is needed. Valid key returns 200, a missing or wrong key gets 403, and /health needs no key.

Does a new CrowdSec install start blocking attacks immediately?

No. It receives the Community Blocklist by default, but it detects local attacks only once you mount log sources and configure acquisition, or connect remote agents. And the engine only decides: something still has to enforce, through a bouncer, so install one on the machine that should block.

Is the CrowdSec Local API encrypted?

No. It is plain HTTP on a raw server TCP port, with no domain and no xCloud-managed HTTPS, so restrict it to trusted IPs at the server firewall and do not treat it as encrypted transport. There is also no web interface; the Prometheus metrics port is not published.

Firewall management

Does CrowdSec send data to the CrowdSec Central API?

By default yes: the install registers with the Central API, shares signals and receives the Community Blocklist. Set DISABLE_ONLINE_API=true in the Environment editor to opt out, at the cost of losing the blocklist. Linking the optional Console is a separate enrolment you choose.

What should I back up on a CrowdSec server?

A backup is both persistent volumes, crowdsec_data for the runtime database and decisions and crowdsec_config for configuration, registration and credentials, taken together as a consistent pair with writes paused. Keep the bouncer key with them, and test a restore.

Backups in xCloud

How do I upgrade CrowdSec?

Nothing upgrades it for you: the image is pinned at v1.8.1 by immutable digest. Existing installs keep their image until you adopt a newer template version. Read the upstream release notes, take fresh backups of both volumes, apply the newer template version, and confirm your bouncers still authenticate afterwards.

Is this CrowdSec cloud hosting?

It is your own Local API on a dedicated Cloud VPS provisioned by xCloud, not a hosted CrowdSec service, and not an official CrowdSec offering. The container, both volumes and the bouncer key belong to your install, and no partnership is implied.

Can I cancel anytime?

Yes. There is no lock-in — cancel any time. Hosting is billed monthly and charged for what you actually use, so when you delete the server the unused balance is refunded to your account, less up to 10% in payment-processing fees.