What it does
Wazuh is an open-source security platform combining endpoint and cloud-workload monitoring, event analysis and response capabilities.
Wazuh combines agent-based file-integrity monitoring, configuration assessment, log analysis and response around a central platform. Define which findings an operator must review and which may trigger active response before enabling automation. A self-managed deployment leaves infrastructure, access and data-retention policy with the operator; Wazuh Cloud supplies a managed, ready-to-use environment. Its free Cloud trial is separate from permanent hosted access.
Strengths
- Several endpoint-monitoring functions in one platform
- Self-managed and managed-cloud options
Best for
- Teams centralizing server and endpoint security events
Sources
- Wazuh - Open Source XDR. Open Source SIEM. (Oct 26, 2026)
- Wazuh component licences (Oct 26, 2026)