Quotas and plan limits
This page is the single source of truth for quantitative plan limits. All other Premium documentation references these values rather than repeating them.
Entitlement values here reflect the standard plan tiers. Custom volumes are available for enterprise and MSP arrangements — contact the CrowdSec team for details.
Protection limits
| Entitlement | Community | Premium (base) | Expandable | Unit |
|---|---|---|---|---|
| Community Blocklist size | 3,000 IPs | 50,000 IPs | No | IPs per organization |
| Blocklist subscriptions | 3 | Unlimited | N/A | Per organization |
| Threat Forecast Blocklist | Not available | Included | N/A | Per organization |
| Premium tier blocklist access | Not available | Included | N/A | Per organization |
Alert limits
| Entitlement | Community | Premium (base) | Expandable | Unit |
|---|---|---|---|---|
| Alert quota | 500 | 10,000 | Yes | Per organization per month |
| Alert retention | 60 days | 365 days | No | Per organization |
The Premium alert quota of 10,000 applies per Security Engine per month by default. Organizations with many engines should verify their expected volume. Contact CrowdSec if you need a custom quota.
Investigation limits
These are two distinct entitlements. Console IP investigations are performed through the Console interface. CTI API calls are made programmatically via the API.
| Entitlement | Community | Premium (base) | Expandable | Unit |
|---|---|---|---|---|
| Console IP investigations | 30 | 100 | Yes | Per organization per week |
| CTI API calls | 120 | 1,500 | Yes | Per API key per month |
Organization and team limits
| Entitlement | Community | Premium (base) | Expandable | Unit |
|---|---|---|---|---|
| Organization seats | 1 | 5 | Yes | Per organization |
| Additional organizations | 1 (free) | Unlimited | N/A | Per account |
Support entitlements
| Entitlement | Community | Premium | Advance |
|---|---|---|---|
| Support channel | Community forum / Discord | Console chat | Console chat |
| First contact SLA | No SLA | 3 business days | 1 business day |
| Workaround / solution SLA | No SLA | 5 business days | 3 business days |
| Support hours | N/A | 8 AM–5 PM CET, business days | 8 AM–5 PM CET + out-of-hours for critical |
| Scope | Community | Console platform | Console + Engines + Integrations + all products |
Notes on expandable limits
Entitlements marked as expandable can be increased beyond the base plan values. Contact CrowdSec to discuss:
- Additional organization seats beyond 5
- Higher Console IP investigation quotas
- Higher CTI API call quotas
- Custom alert volumes for large-scale deployments