Wazuh - The Open Source Security Platform Reviews & Product Details

It’s an open-source platform that’s easy to install in an on-prem environment. I can easily create rules and decoders for custom logs, and the integrations are straightforward to set up. It also provides excellent tools for log analysis, vulnerability detection, FIM, threat detection, compliance management, and incident management. Deploying the agent across multiple hosts is simple via the command line. Wazuh supports real-time monitoring of system logs and configuration, with automated alerts and VM detection. The documentation is also well maintained. Review collected by and hosted on G2.com.

It’s very difficult for new users to learn and get started with. It also uses a lot of resources when working with large data. Sometimes, it causes problems when upgrading to a newer version. Review collected by and hosted on G2.com.

Wazuh helps keep all your computers and servers safe by watching for bad behavior, checking for weaknesses, and sending alerts when something suspicious happens. It’s free, open, and can be customized to fit any setup, from small networks to large companies. Review collected by and hosted on G2.com.

Some common drawbacks of Wazuh are that it can be complex to set up and configure, especially for large environments, and managing rules, alerts, and integrations can require significant time and expertise. Additionally, its UI and reporting features are less polished compared to some commercial alternatives, which can make monitoring at scale more cumbersome. Review collected by and hosted on G2.com.

Wazuh is the level of visibility and control it provides over security events across the entire infrastructure. The real-time threat detection, log analysis, and compliance monitoring are very powerful for an open-source platform. It delivers enterprise-level security capabilities without high licensing costs. Review collected by and hosted on G2.com.

The main drawback is the steep learning curve, especially for new users during initial setup and tuning. Some configurations and rule customizations can be time-consuming, and the UI could be more intuitive. Better guided setup and clearer documentation for advanced use cases would help a lot. Review collected by and hosted on G2.com.

The main reasons that i like about wazuh is being free and opensouce, having simpler learning curve and ease of use, it is user friendly and best choice for small scale companies Review collected by and hosted on G2.com.

In my openion the down side of wazuh is it is difficult to integrate it with 3rd party solutions, and don't have built in plugins to do so compared to other SIEMs in the ecosystem. Review collected by and hosted on G2.com.

It does not cost me anything. The agents that are installed are preconfigured to look at specific details of my end points. It can ID out of date patches on all major applications. It identifies certain items that have CVE's associated with them. I can custom query anything. It was pretty easy to roll out. My organization does not use PowerShell on typical endpoints, so we have to use kind of a modified .msi to roll out updates. Review collected by and hosted on G2.com.

It cannot push end point agent updates without a paid subscription. Setting up the user roles is a little tough - it is very convoluted and hard to follow the process. Review collected by and hosted on G2.com.

Reduce costs with open source product. Popularity - a lot informations and big KB.

Easy to management. Review collected by and hosted on G2.com.

Opensource is always a risk. Complicated implementation on-prem console. Review collected by and hosted on G2.com.

Wazuh SIEM stands out as an exceptional security solution that combines powerful threat detection with extensive monitoring capabilities. As a user, I am particularly impressed by its ability to integrate seamlessly with various data sources, providing a holistic view of our security posture. The platform’s ability to process and analyze large volumes of data in real-time has significantly enhanced our incident response capabilities Review collected by and hosted on G2.com.

While Wazuh SIEM is robust, the initial setup and configuration can be somewhat complex, especially for users without extensive SIEM experience. The documentation is detailed but could benefit from more examples and clearer step-by-step instructions for common use cases. Additionally, the learning curve can be steep for new users, and more interactive tutorials or guided setups would be beneficial. Review collected by and hosted on G2.com.

Great open source, free Security Operation Center for small and mid-size businesses. Very easy and fast deployment. Real-time monitoring of the connected endpoints. It integrates very well on the Windows and Linux platforms. If you need to make sure that your organization is HIPAA compliant, this tool will help you to verify your compliance in a few fast clicks Review collected by and hosted on G2.com.

The main dashboard is a little incomplete. Wazuh would greatly benefit from the implementation of aggregation issues (per issue). Currently, admin has to hope from endpoint to endpoint screen to see problematic areas Review collected by and hosted on G2.com.

"Wazuh - The Open Source Security Platform" is an impressive tool that offers comprehensive security solutions for both small-scale and enterprise-level environments. As an open-source platform, it provides users with the flexibility to tailor security measures according to their specific needs without the constraints of proprietary software.

Wazuh stands out as a powerful open-source security platform that effectively addresses modern cybersecurity challenges. Its comprehensive features, scalability, and active community support make it a valuable asset for organizations seeking robust protection against evolving threats. Review collected by and hosted on G2.com.

At this point of time i dont find any downside of wazuh. Review collected by and hosted on G2.com.

-Wazuh is opensource and free to use

-Easily scalable

-Can run in standalone server as well as in cluster mode

-Has great agent functioality

-Easy to onboard multiple data sources

-Supports 3rd party integrations for alerts and communications Review collected by and hosted on G2.com.

-I can not think of anything to dislike about except it may be reaource consuming sometimes Review collected by and hosted on G2.com.