← Package directory
Available on winget

Install CrowdSec

CrowdSec Agent for Windows

Install with winget
winget install --id CrowdSecurity.CrowdSec
Upgrade
winget upgrade --id CrowdSecurity.CrowdSec
Uninstall
winget uninstall --id CrowdSecurity.CrowdSec

About CrowdSec

CrowdSec Agent for Windows

What's new in 1.7.8

New Features - WAF: OpenAPI schema validation (#4097) @blotus Improvements - WAF: enforce body size limitation (#4355) @blotus - Decision stream: move to chunked transfer by default (#4413) @blotus - cscli: add --quick flag to enroll command (#4350) @blotus - propose an alternative, cleaner configuration for appsec-config (#4397) @buixor Bug Fixes - cscli metrics: don't attempt to create a DB client if there's no DB config (#4451) @blotus - papi: don't spam logs if chan is closed (#4439) @blotus - alerts: use single transaction when creating alert and all related items (#4438) @blotus - LAPI: enforce maximum body size for decompression Chore / Deps - build(deps): bump the gomod group across 1 directory with 34 updates (#4453) @dependabot[bot] - build(deps): bump the github-actions group with 2 updates (#4447) @dependabot[bot] - build(deps): bump alpine from 3.21 to 3.23 in /build/docker in the docker group across 1 directory (#4441) @dependabot[bot] - build(deps): bump the github-actions group with 7 updates (#4443) @dependabot[bot] - build(deps): bump the uv group in /build/docker/test with 3 updates (#4442) @dependabot[bot] - db: add some missing indexes (#4435) @blotus - Dependencies update (#4412) @blotus - add PAPI metrics (#4411) @blotus - build(deps): bump github.com/aws/aws-lambda-go from 1.47.0 to 1.54.0 (#4402) @dependabot[bot] - build(deps): bump docker/login-action from 4.0.0 to 4.1.0 (#4403) @dependabot[bot] - build(deps): bump github.com/google/go-querystring from 1.1.0 to 1.2.0 (#4400) @dependabot[bot] - build(deps): bump actions/setup-go from 6.3.0 to 6.4.0...

Read release notes

Version history

Version Updated Notes
1.7.8 Unknown New Features - WAF: OpenAPI schema validation (#4097) @blotus Improvements - WAF: enforce body size limitation (#4355) @blotus - Decision stream: move to chunked transfer by default (#4413) @blotus - cscli: add --quick f...
1.7.7 Unknown CrowdSec 1.7.7 brings 2 major changes: - On linux, RE2 is now used by default for evaluating regexp in parsers - WAF rules can now contain a mix of AND/OR conditions without any limits, giving much greater flexibility wh...
1.7.6 Unknown Changes Bug Fixes - cmd/crowdsec: assign overflow after parsing (#4225) @mmetc Geolite2 notice This product includes GeoLite2 data created by MaxMind, available from https://www.maxmind.com. Installation Take a look at t...
1.7.5 Unknown Changes - replace syscall with unix/windows packages where possible (#3032) @mmetc - pkg/acquisition: refact configuration validation and tests (#4187) @mmetc - pkg/acquisition: remove/restore mock datasources after usag...
1.7.4 Unknown Changes - docker: remove CROWDSEC_CONTAINER_ENV (#4085) @mmetc - refact cscli: define csconfig.Getter once (#4091) @mmetc - refact load/save apic token: dependencies and sentinel errors (#4081) @mmetc - pkg/csplugin: use...
1.7.3 Unknown Changes - move hubupdate.sh to libexec (#4000) @mmetc - rpm: install hubupdate with full path (#4002) @mmetc Geolite2 notice This product includes GeoLite2 data created by MaxMind, available from https://www.maxmind.com....
1.7.2 Unknown Changes - hub update: add systemd timer and service (#3977) - rpm: package hubupdate.sh (#3979) - rpm: immediately activate systemd timer (#3985) - Windows: Revert to windows 2022 to fix build (#3986) - deb: remove cron...
1.7.1 Unknown Changes - acquisition: set S3 anon creds during tests, prevent deadlock (#3961) @mmetc - refact: don't call defer in loops, enable linter (#3907) @mmetc - refact: remove unused struct fields / 2 (#3946) @mmetc - refact:...
1.7.0 Unknown The 1.7.0 release of crowdsec brings some major changes to how services are auto-detected during installation, and to the metrics shared by the log processors to LAPI. The new detection system, cscli setup, is much more...
1.6.11 Unknown Warning This release fixes an issue with the Windows version of CrowdSec that prevented it from shutting down properly. Due to this issue, the service will not stop automatically when updating to this version. You will n...
1.6.10 Unknown Overview This release mostly focuses on small bug fixes and improvements: - WAF: fixed a resource leak in the appsec datasource when checking bouncer authentication - Allowlists: added cscli allowlists check to check if...
1.6.9 Unknown Overview Warning Docker acquisition now requires access to the events API endpoint. If you are using a socket proxy, make sure to update its configuration. - Improved performance for the docker datasource by using docker...
1.6.8 Unknown Changes - build(deps): bump github.com/golang-jwt/jwt/v4 from 4.5.1 to 4.5.2 (#3531) @dependabot[bot] - CI: enable linter "noctx" (#3528) @mmetc - CI: enable linter "containedctx" (#3529) @mmetc - only warn about capi_wh...
1.6.5 Unknown Overview **This release highlights the appsec feature. Important fixes were done. ** See documentation here **The cscli hub command has been revamped. See documentation here New Features - acquisition/victorialogs: add n...
1.6.4 Unknown Overview HTTP datasource This release introduce http data source that enable crowdsec to ingest logs from an http endpoint such as Datadog or Vector. See documentation here Alert context appsec This release also introduc...
1.6.2 Unknown Changes - replace log.Fatal with error return (#2996) @mmetc - bats: clean up extra output (#3008) @mmetc - make: remove unused targets (#2998) @mmetc - deb,rpm: include empty directory etc/crowdsec/acquis.d (#2997) @mme...
1.6.1 Unknown Changes - rename bouncers to remediation component in openAPI (#2936) @AlteredCoder - docker: distribute geoip db in slim image (#2920) @mmetc New Features - LAPI: local api unix socket support (#2770) @mmetc Improvement...
1.6.0 Unknown No notes
1.5.5 Unknown No notes
1.5.4 Unknown No notes