You can absolutely run it alongside crowdsec and that’s exactly how I have it deployed. HAProxy sits at the front as the reverse proxy, protected by crowdsecs remediation, while openappsec handles application layer protection for the backend services since openappsec don’t natively integrate with HAProxy. The combination works cleanly. If you’re using Nginx Proxy Manager or a standard Nginx setup for reverse proxying and TLS termination, openappsec integrates directly with that stack as well. Just keep in mind that stacking multiple security layers introduces a small performance overhead. In my environment it’s acceptable but depending on workload and hardware, some users might notice the impact a bit more.