AppBreakup
Submit an app
Wazuh logo

Wazuh

Open-source security platform combining SIEM and XDR for endpoints and cloud workloads.

Open sourceSelf-hostableMonitoring and error tracking tools
Visit WazuhSee 6 alternatives
Verified facts
4 of 4
Alternatives ranked
6
Approved reviews
0
Visits sent from here
0

About Wazuh

Wazuh is an open-source security monitoring platform that covers jobs usually split across several products: log analysis and SIEM, endpoint detection and response, file integrity monitoring, vulnerability detection, configuration assessment and compliance reporting. You install a lightweight agent on servers, laptops and cloud instances, and it reports to a central Wazuh server with an indexer and web dashboard where alerts and reports live. It covers on-premises machines as well as public and private clouds. The software itself is free with no licence cost, and you can run it on your own infrastructure with community support. Wazuh also sells a managed cloud version, priced by number of agents and data retention, with a free trial, plus paid support. It's aimed at security teams and managed service providers who want a self-hosted alternative to commercial SIEMs, and running it well takes real effort to tune.

Best for: Security teams wanting a free, self-hosted SIEM and endpoint monitoring platform..

Pros and cons

What works

  • SIEM, endpoint monitoring, vulnerability detection and compliance in one platform
  • No licence cost when self-hosted
  • Agents for servers, desktops and cloud workloads
  • Optional managed cloud with a free trial

Why people leave

  • Self-hosting the server, indexer and dashboard takes real setup and tuning
  • Managed cloud plans start at several hundred dollars a month
  • Default rules can be noisy until tuned

Top Wazuh alternatives

See all 6
  1. 1osquery logo
    osquery

    Lighter, SQL-based host visibility agent if you'd rather build your own detections.

    66.5
  2. 2Elastic Observability logo
    Elastic Observability

    Elastic's stack adds strong search and dashboards, with security features alongside observability.

    64.8
  3. 3Graylog logo
    Graylog

    Open-source log management with SIEM features, simpler if logs are the main need.

    61.8
  4. 4Sumo Logic logo
    Sumo Logic

    Hosted log analytics with a cloud SIEM, so there's no server to run yourself.

    59.4
  5. 5Suricata logo
    Suricata

    Free network IDS/IPS when the priority is inspecting traffic rather than endpoints.

    54.5

Why people left Wazuh

In reviewers' own words, from reviews of the apps they moved to. These are their opinions, not ours.

No switching stories yet. If you moved away from Wazuh, review the app you switched to and tell us why.

Reviews

No approved reviews yet. How we verify reviewers

Write a review of Wazuh
Your rating of Wazuh

Never shown publicly. A work email helps us verify you.

What did you use it for, and what was good or bad? At least 40 characters.

A GitHub username, your company domain, or say you can send a screenshot. Verified reviews count more.

By submitting, you confirm you're at least 16 and agree to our terms. Your name, rating, review and the date are published; your email isn't. See our privacy policy.

Wazuh: common questions

Is Wazuh free?

Yes. Wazuh is free, open-source software that you can host yourself.

Is Wazuh open source?

Yes. The source code is on GitHub at wazuh/wazuh. You can also run it on your own server.

What platforms does Wazuh run on?

Wazuh is available for Web, Linux, Windows, macOS and Self-hosted.

What are the best alternatives to Wazuh?

The highest-ranked Wazuh alternatives right now are osquery, Elastic Observability and Graylog. See the full ranked list for pricing, platforms and verified facts.

See all 6 Wazuh alternatives