selfhost.directory

The index of self-hostable projects — ranked, categorized and served with live updates.
Own your data and stop giving it to big tech.

GitHub
crowdsec-web-ui logo

Self-host crowdsec-web-ui

2026.10.11

Self-hosted dashboard for CrowdSec alerts and decisions

ReleaseOpen SourceAGPL-3.0
Updated10 hours ago
LanguageTypescript
Setup difficultyModerate
MobileResponsive
ThemeDark mode
Stars
860
Port
3000 (HTTP listen port)
Requires
CrowdSec LAPI
Docker
ghcr.io/theduffman85/crowdsec-web-ui
Install with Docker
Dashboard with alert and active-decision totals, attack map, drilldowns, top listsCombined multi-instance alerts viewAlerts page with searchable history and quick filtersAlert details with CrowdSec contextSearch syntax referenceQuick filters applied to alertsSaved and recently used filtersDecisions page with active and expired decisionsAdd Decision dialog with manual ban options

What is crowdsec-web-ui?

CrowdSec Web UI is a self-hosted dashboard for the CrowdSec security engine. It provides a unified interface to investigate alerts, manage active and expired decisions, monitor runtime metrics from Prometheus endpoints, and configure notification rules delivered via multiple channels. The application supports multiple CrowdSec LAPI instances with a combined view, offers dark/light themes, responsive layouts, and extensive branding customization. Authentication includes built-in accounts with password and TOTP, passkeys, and OIDC SSO with support for providers like Authentik, Authelia, and Keycloak. It runs as a Docker container (ghcr.io/theduffman85/crowdsec-web-ui) or via Docker Compose, stores data in SQLite, and requires a running CrowdSec LAPI to connect to.

Should you self-host crowdsec-web-ui?

crowdsec-web-ui scores 55/100 on selfhost.directory (how scoring works) and ranks #31 of 78 in Security. It has 860 GitHub stars.

It shipped 28 stable releases in the past year. The latest, 2026.10.11, came out on 27 October 2026. New versions land roughly every 3 days.

Setup is moderate: expect some configuration beyond a single command. An official Docker image is available. It is AGPL-3.0-licensed and written mostly in Typescript.

Its closest alternative on selfhost.directory is pentagi (83/100, 32 629 stars). It scores higher overall, so compare the two before you pick. See crowdsec-web-ui vs pentagi side by side.

Features

  • Alert investigation
  • Alert source filtering
  • Audit Logging
  • Branding customization
  • Decision management
  • Localization
  • Multi-Instance Support
  • Notification rules
  • OIDC SSO
  • Prometheus Metrics
  • Saved and recent filters
  • Simulation mode support
  • Two-factor authentication

crowdsec-web-ui README

How to install crowdsec-web-ui

Install crowdsec-web-ui with Docker

Docker; CrowdSec LAPI reachable on network
Environment variables
CONFIG_INSTANCE_LAPI_URL, CONFIG_INSTANCE_LAPI_AUTH_USERNAME, CONFIG_INSTANCE_LAPI_AUTH_PASSWORD

docker pull ghcr.io/theduffman85/crowdsec-web-ui:latest mkdir -p data docker run -d
--name crowdsec_web_ui
-p 3000:3000
-v $(pwd)/data:/app/data
-e CONFIG_INSTANCE_LAPI_URL=http://crowdsec:8080
-e CONFIG_INSTANCE_LAPI_AUTH_USERNAME=crowdsec-web-ui
-e CONFIG_INSTANCE_LAPI_AUTH_PASSWORD=your-crowdsec-password
--network your_crowdsec_network
ghcr.io/theduffman85/crowdsec-web-ui:latest

Requires a running CrowdSec LAPI on the same Docker network

crowdsec-web-ui releases & version history

More in Monitoring & observability

Rate this project

Click to rate — no account needed.

0 comments

Posting as guest
Loading comments…