CrowdSec is a GitHub-hosted security engine that claims to analyze logs and HTTP requests, then push remediation through components and a community IP blocklist. The public value is the architecture question, because shared blocking only helps operators if provenance, false positives, and rollback are as visible as the block itself.