Wazuh

Open source

Wazuh is an open source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads.

Pricing: free, subscription
Free tier: true
License: open-source
Open source: Yes

Editorial review

Wazuh has not yet been editorially reviewed. User reviews and published field data below are unaffected — we say so rather than implying an editorial verdict.

Facts & attributes

Every value carries its evidence state. “—” means unknown — never a silent default (P-02).

Identity · Taxonomy

Documentation(HTTPS URL): https://documentation.wazuh.com/current/Verified
Tags(open-source;cloud-native): siem, xdr, open-source, threat-detection, host-securityVerification pending

Platform · Deployment

Delivery model(SaaS;self-hosted;desktop;mobile;embedded;managed-cloud;appliance): self-hosted, SaaSVerification pending

Pricing · Licensing

Free plan(true/false): trueVerification pending
Free trial(true/false): trueVerification pending
License model(proprietary;open-source;source-available;dual-license): open-sourceVerification pending
Pricing model(free;subscription;usage;seat;asset;transaction;revenue-share;perpetual;custom): free, subscriptionVerification pending
Source repository(HTTPS URL): https://github.com/wazuh/wazuhVerified
SPDX license IDs(Apache-2.0;MIT): GPL-2.0-onlyVerified

Features · Product · Fit

Core capabilities(authoring;automation;analytics): Unified XDR and SIEM, Security event monitoring, detection, and alerting, File integrity monitoring and malware detection, Vulnerability detection, Threat hunting and incident response, Active responseVerification pending

Api · Integrations · Ecosystem

API available(true/false): trueVerification pending
CLI(true/false): trueVerification pending

Security · Privacy · Compliance

Regulatory compliance(HIPAA;PCI DSS;FedRAMP;GDPR support): PCI DSS, HIPAA, GDPR, NIST 800-53, TSCVerified

Support · Docs · Services

Support channels(email;ticket;chat;phone;community): community, professional supportVerified

Audience · Use · Case

Best for(Neutral editorial summary): Teams that want a free, self-hosted open source SIEM/XDR with an optional managed cloud, from individual labs to large deployments.Verification pending
Company-size fit(individual;SMB;mid-market;enterprise): individual, SMB, mid-market, enterpriseVerification pending
Primary use cases(build;monitor;automate): Endpoint security, Cloud security, Security operations and threat intelligence, Regulatory complianceVerification pending
Skill level(beginner;intermediate;advanced;specialist): advancedVerification pending

Lifecycle · Versioning

Current version(1.12.3): 4.14Verified
Maintenance status(active;maintenance;deprecated;EOL;archived): activeVerified

Vendor · Maintainer

Founded year(2012): 2015Verified
Vendor type(commercial;foundation;community;government;consortium;individual): commercialVerification pending

User reviews

Review policy

No published reviews yet.