About Wazuh
Wazuh is a free and open source security platform that combines XDR and SIEM. It protects endpoints, servers and cloud workloads from one agent and one platform.
What it does
Wazuh agents run on endpoints and collect security data such as configuration state, file changes and system events. The platform analyzes this data, looks for malware and vulnerabilities, and raises alerts. Active response can take on-device steps to contain threats, and log analysis supports compliance and incident response work.
Key features
- Endpoint security and configuration checks
- File integrity monitoring
- Malware and vulnerability detection
- SIEM log analysis and threat hunting
- Security posture checks for containers and cloud workloads
Who it's for
Security operations teams, IT administrators and compliance staff who need one platform for endpoint protection and log monitoring. Organizations that prefer open source tools with no license fee will find it a good starting point.
Pricing and good to know
Wazuh is open source and free to use, and a free cloud trial is offered for the managed service. Community support is free, and a managed cloud service is available for teams that prefer not to run the platform themselves.
Highlights
- Endpoint security and configuration checks
- File integrity monitoring
- Malware and vulnerability detection
- SIEM log analysis and threat hunting
- Security posture checks for containers and cloud workloads
