CrowdSec — #3 Alternative to Splunk
Collaborative open-source intrusion prevention engine parsing logs to block attackers
CrowdSec analyzes server, firewall, and Kubernetes logs locally to detect brute-force, credential stuffing, and CVE scans, enforcing blocks instantly via NGINX, Cloudflare, or Linux nftables bouncers.
License: MIT · Pricing: Open Core · Compare all Splunk alternatives · Official Website