Wazuh is an open source security platform that combines extended detection and response (XDR) and security information and event management (SIEM) capabilities. It is designed to provide unified protection for endpoints and cloud workloads across public clouds, private clouds, and on-premises data centers. The platform addresses a broad range of security needs, including threat detection, incident response, and regulatory compliance, by consolidating historically separate functions into a single agent and platform architecture.
Key features of Wazuh include endpoint security, configuration assessment, malware detection, file integrity monitoring, threat intelligence, threat hunting, log data analysis, vulnerability detection, security operations, incident response, IT hygiene, cloud security, container security posture management, and workload protection. The platform offers real-time correlation and context for analysts, with granular active responses and on-device remediation to maintain endpoint integrity. Its SIEM solution enables monitoring, detection, and alerting of security events and incidents.
Wazuh is suitable for organizations seeking scalable and flexible security solutions, including enterprises, startups, and IT security teams. It supports integration with third-party APIs and solutions such as VirusTotal, TheHive, and PagerDuty, allowing users to both send and receive security data and tailor the platform to their specific requirements. The platform is available as a managed cloud service, providing ready-to-use and scalable environments for security monitoring and endpoint protection.
As an open source tool, Wazuh is offered at no cost, with no license fees and no vendor lock-in. It provides free community support and comprehensive documentation, encouraging user contributions and customization. The platform emphasizes transparency, flexibility, and continuous improvement, with a development process that includes rigorous testing and auditing. Users have the ability to modify the source code to fit their security needs, and the platform is recognized for its adaptability and integration capabilities within the cybersecurity landscape.
Wazuh is an Infrastructure & Backend product. It focuses on providing unified security monitoring and threat detection for endpoints and cloud workloads. It is built as an open-source project for security analysts. Wazuh is open source under the Open Source license. Wazuh is available on the web, Windows, Linux, macOS, and the command line, and it can be self-hosted.
It is developed by Wazuh, and the product first shipped in 2005. Development happens publicly on GitHub with 16.1k stars and 1.7k commits in the last 90 days. Key capabilities include endpoint protection, SIEM integration, and threat detection. It exposes integrations via a public API.
Latest indexed changes and source events
Other apps tracked under the same category.
