Wazuh is a security monitoring platform that collects endpoint events, checks configurations, detects file changes, and correlates security information, giving teams a centralized view of systems through agents, analysis services, and dashboards.
Endpoint event collection
File integrity monitoring
Configuration assessment
Security dashboards
Is it a good fit?
Best suited to
Security teams monitoring endpoints and configuration changes
Before you choose
Requires substantial deployment and tuning. Alerts need ongoing investigation.
Editorial assessment based on the provider’s published information. Our method
Know what you're signing up for.
The listed Wazuh software is available without a license fee under GPL/AGPL and component licenses. Included capabilities cover endpoint event collection, file integrity monitoring, configuration assessment. Free self-hosted platform; Wazuh Cloud, servers, retention storage, and support are separate.
Open-source software
$0ongoing software access
Free self-hosted platform; Wazuh Cloud, servers, retention storage, and support are separate.
Wazuh is a useful option for security teams monitoring endpoints and configuration changes. Enroll a small representative group of endpoints and validate the events and configuration checks they generate. Start with a small, representative task so you can check the results before extending the setup.
Set retention and escalation rules before expanding coverage, and tune noisy detections against the environment's normal behavior. Consider the practical trade-off: requires substantial deployment and tuning.
A few things you might be wondering.
Is Wazuh free?
The listed Wazuh software is available without a license fee under GPL/AGPL and component licenses. Included capabilities cover endpoint event collection, file integrity monitoring, configuration assessment. Free self-hosted platform; Wazuh Cloud, servers, retention storage, and support are separate.
Does Wazuh require endpoint software?
Many endpoint features use a Wazuh agent, while other integrations collect data differently.
Is Wazuh Cloud included?
No. The open-source platform and the managed cloud service are separate offerings.
Where can I check the latest prices?
Use the provider link on this page. Billing period, location, team size, promotions, taxes, and optional extras may affect the amount you pay.
How should I compare this tool with alternatives?
Choose tools for the same task, then compare their feature limits, platform support, and total cost for your team. The Compare button helps you keep a shortlist.
Are the user reviews moderated?
Yes. New reviews are submitted for moderation. We show published user reviews separately from the editorial overview and never assign a default user rating.
Zeek is a network-analysis framework that turns observed traffic into structured logs and events, with a scripting language for custom analysis, helping defenders investigate activity and build detections from protocol-level context across their networks.
Free & open source
Free analysis framework; sensors, log storage, and investigation platforms are separate.
KeePass is a desktop password manager that stores credentials in an encrypted database, with password generation, groups, search, and auto-type tools for people who want to manage their own vault files and backups.
Free & open source
Free desktop password manager; cloud synchronization and mobile clients are separate choices.
