The original request was closed because CrowdSec seemed to be paid for companies. From what I can see in CrowdSec's public documentation and GitHub repository, this may have changed: the Security Engine, bouncers and hub rules appear to be MIT licensed, and the Community Blocklist seems to be offered as a free service that each server pulls directly from CrowdSec. Premium features look optional. I'm not a licensing expert, so it would be worth verifying this with CrowdSec directly, but it might be worth revisiting.

With the steady rise in automated attacks on web servers, having CrowdSec built into Ploi would be a big win. It's a modern alternative to Fail2Ban with crowdsourced IP reputation, and it's EU-based, which matters for many European users.

A simple integration would already go a long way: install the agent plus the firewall bouncer, wire up the Nginx/SSH logs, and add a basic panel view to see and unban blocked IPs.

Happy to help test.