Wazuh

Free open-source SIEM and XDR platform with an optional hosted cloud

Overview

Wazuh is a free, open-source security platform that combines SIEM and extended detection and response for endpoints and cloud workloads[23]. It describes itself as the world’s most widely used open-source security solution, citing more than 15 million protected endpoints, more than 100,000 enterprise users and more than 30 million downloads a year[23]. The software has no licence cost, and community support is free[23].

Wazuh’s agent performs log collection, file integrity monitoring, vulnerability detection, configuration assessment and active response, and the central server correlates events and maps them to compliance frameworks. Because it is self-hosted by default, users carry the operational burden of running indexers and dashboards themselves. The company sells professional support, consulting and training, and offers Wazuh Cloud for those who prefer a managed service[23][24].

Wazuh Cloud prices are published by agent count: the Small tier for up to 100 agents starts at US$571 a month, Medium for up to 250 agents at US$923 a month, and Large for up to 500 agents at US$1,467 a month, with a 14-day free trial and no credit card required[24]. Wazuh states that the cloud service is PCI DSS and SOC 2 certified[24].

Wazuh features

  • Free open-source SIEM and XDR
  • Endpoint agent with file integrity monitoring
  • Vulnerability detection and configuration assessment
  • Compliance mapping
  • Active response actions
  • Optional managed Wazuh Cloud

Wazuh pricing

Self-hosted: free. Wazuh Cloud: Small (up to 100 agents) from US$571/month; Medium (up to 250) from US$923/month; Large (up to 500) from US$1,467/month; custom plans available. 14-day free trial, no credit card.

Wazuh strengths and limitations

Strengths

  • No licence cost for the self-hosted platform
  • Large community and install base
  • Published, agent-based cloud pricing
  • Endpoint agent and SIEM in one project

Limitations

  • Self-hosting requires in-house operations skills
  • Fewer advanced analytics and AI features than commercial SIEMs
  • Commercial support costs extra
  • Scaling large deployments demands careful architecture

Appears in

Wazuh alternatives and competitors

Alternatives to Wazuh: companies ranked in the same lists.

Is this your company?

Update the description, logo, image and link through the submission form. Editors review every change.

Update this listing

Is your company missing from a list?

Send your logo, description and link. Editors review every submission, and approved listings are clearly labelled.

Add your company