--- title: Wazuh Reviews meta_title: 'Wazuh Reviews 2026: Details, Pricing, & Features | G2' meta_description: Filter 71 reviews by the users' company size, role or industry to find out how Wazuh works for a business like yours. aggregate_rating: rating_value: 4.5 review_count: 71 scale: '5' date_modified: '2026-08-13' parent_category: name: Endpoint Protection url: https://www.g2.com/categories/endpoint-protection --- # Wazuh Reviews **Vendor:** Wazuh Inc. **Category:** [Endpoint Detection & Response (EDR) Software](https://www.g2.com/categories/endpoint-detection-response-edr) **Average Rating:** 4.5/5.0 **Total Reviews:** 71 ## About Wazuh Wazuh is a free and open source security platform that unifies XDR and SIEM capabilities. It protects workloads across on-premises, virtualized, containerized, and cloud-based environments. Wazuh, with over 30 million downloads per year, has one of the largest open-source security communities in the world. Wazuh helps organizations of all sizes protect their data assets against security threats. Learn more about the project at wazuh.com ## Wazuh Pros & Cons **What users like:** - Users appreciate the **ease of use** of Wazuh, finding it user-friendly and ideal for small-scale companies. (3 reviews) - Users value Wazuh's **affordability** , enjoying top-tier security features without the burden of high licensing fees. (2 reviews) - Users value the **high visibility and control** provided by Wazuh for comprehensive security event management. (1 reviews) - Users find Wazuh's **easy management** features enhance usability, facilitating efficient operations and cost reduction. (1 reviews) - Users find the **easy setup** of Wazuh greatly beneficial for rolling out and managing security effectively. (1 reviews) - Experience Satisfaction (1 reviews) - Users find the **implementation ease** of Wazuh impressive, facilitating quick deployment and efficient monitoring. (1 reviews) - Log Management (1 reviews) - Management Ease (1 reviews) - Monitoring (1 reviews) **What users dislike:** - Users struggle with the **complex interface** , finding it challenging to navigate during setup and configuration. (2 reviews) - Users find Wazuh **not user-friendly** , struggling with steep learning curves and convoluted setup processes for new users. (2 reviews) - Users face **complicated implementation** challenges with the on-prem console, creating frustrations during setup and management. (1 reviews) - Users face a **steep learning curve** with Wazuh, finding initial setup and tuning time-consuming and challenging. (1 reviews) - Users find the **difficult setup** of Wazuh challenging, particularly due to its steep learning curve and time-consuming configurations. (1 reviews) - Integration Issues (1 reviews) - Learning Curve (1 reviews) - Limited Integration (1 reviews) - Not Intuitive (1 reviews) - Rules Management (1 reviews) ## Wazuh Reviews ### 1. HIDS Security features offered by Wazuh Cloud platform for application endpoint security is good **Rating:** 3.0/5.0 stars **Reviewed by:** Komal J. | Software Developer, Information Technology and Services, Enterprise (> 1000 emp.) **Reviewed Date:** March 08, 2022 **What do you like best about Wazuh?** Wazuh offers cloud-based application monitoring & security solutions that effectively collect data, aggregate them, and analyze them through proper indexing. Its Wazuh agents are suitably fast & lightweight that provide good monitoring & response capabilities. They analyze OS & application logs and then transfer them to the central manager for system errors, misconfigurations, and policy violations. **What do you dislike about Wazuh?** You won't be able to access your environment deployed in the Wazuh cloud using SSH access, unlike AWS EC2 instances. This restricts various customization features at the infrastructure level, and also communications are passed only through Wazuh agents. **What problems is Wazuh solving and how is that benefiting you?** Wazuh promotes Host-Based Intrusion Detection system in which various Wazuh agents operate in our application cluster to detect intrusions and vulnerabilities. It offers file integrity monitoring features for threat identification & compromised host statuses. Wazuh handles automatic environment updates so no need to download any patches or schedule downtime for getting the latest version. Its SSO features are suitable for our Endpoint authentication as we can access Wazuh web user interface through our SSO tools such as Okta, LADP & active directories. Incident response can be enabled to define criteria which will effectively block the access in case of detecting any active threats to our environment. ### 2. Good but hard to configure **Rating:** 2.5/5.0 stars **Reviewed by:** Verified User in Military | Enterprise (> 1000 emp.) **Reviewed Date:** November 28, 2021 **What do you like best about Wazuh?** Really good and easy to setup agents. Multiple functionality **What do you dislike about Wazuh?** but the main console lacks proper ui , documentation etc **What problems is Wazuh solving and how is that benefiting you?** CPU usage, network traffic and metrics observation at its finest ## Wazuh Discussions - [What is Wazuh - The Open Source Security Platform used for?](https://www.g2.com/discussions/what-is-wazuh-the-open-source-security-platform-used-for) - 1 comment - [View Wazuh pricing details and edition comparison](https://www.g2.com/products/wazuh/reviews?filters%5Bnps_score%5D%5B%5D=3§ion=pricing&secure%5Bexpires_at%5D=2026-08-13+08%3A45%3A55+-0500&secure%5Bsession_id%5D=8efa776f-d4c9-4385-a9be-a6f563e30322&secure%5Btoken%5D=93a9f67ebd68f9f937f4b5d14f877276f1801da716814ba389f847f72b5aa216&format=llm_user) ## Wazuh Integrations - [AWS CloudTrail](https://www.g2.com/products/aws-cloudtrail/reviews) - [Discord](https://www.g2.com/products/textaify-discord/reviews) - [FortiClient](https://www.g2.com/products/forticlient/reviews) - [Grafana Labs](https://www.g2.com/products/grafana-labs/reviews) - [Microsoft Defender for Endpoint](https://www.g2.com/products/microsoft-defender-for-endpoint/reviews) - [Microsoft Teams](https://www.g2.com/products/microsoft-teams/reviews) - [n8n](https://www.g2.com/products/n8n/reviews) - [Safetica](https://www.g2.com/products/safetica/reviews) - [Shuffle](https://www.g2.com/products/shuffle/reviews) - [TheHive](https://www.g2.com/products/thehive/reviews) - [VirusTotal](https://www.g2.com/products/virustotal/reviews) - [WatchGuard Network Security](https://www.g2.com/products/watchguard-network-security/reviews) ## Wazuh Features **Services - Endpoint Detection & Response (EDR) ** - Managed Services **Additional Functionality** - Generative AI - Event Analysis - Prioritization - AI Copilot - Whitelisting/Blacklisting - Remediation Management - Alerts/Notifications - Behavioral Analytics - Continuous Monitoring - Root Cause Analysis - Endpoint Management - Anomaly/Malware Detection **Response** - Resolution Automation - Resolution Guidance - System Isolation - Threat Intelligence - Incident Investigation **System Control** - Device Control - Web Control - Application Control - Asset Management - System Isolation **Records** - Incident Logs - Incident Reports **Vulnerability Prevention** - Endpoint Intelligence - Firewall - Malware Detection **Management** - Incident Alerts - Incident Case Management - Workflow Management **Security Management** - Incident Reports - Security Validation - Compliance **Generative AI** - AI Text Generation - AI Text Summarization - Generative AI **Additional Functionality** - SSL Security - HIPAA Compliant - API - Threat Response - Endpoint Protection - Maintenance Scheduling - Third-Party Integrations - Security Auditing - Application Security - Encryption - Network Security - Real-Time Reporting - AI Copilot - Reporting/Analytics - Authentication - Financial Data Protection - Anti Virus - Secure Data Storage - Virus Definition Update - Activity Dashboard - VPN - Audit Trail - Anti Spam - Access Controls/Permissions - Data Visualization - Alerts/Escalation - Data Security ## Top Wazuh Alternatives - [CrowdStrike Falcon Endpoint Protection Platform](https://www.g2.com/products/crowdstrike-falcon-endpoint-protection-platform/reviews) - 4.6/5.0 (418 reviews) - [SentinelOne Singularity Endpoint](https://www.g2.com/products/sentinelone-singularity-endpoint/reviews) - 4.7/5.0 (203 reviews) - [IBM QRadar SIEM](https://www.g2.com/products/ibm-ibm-qradar-siem/reviews) - 4.4/5.0 (283 reviews)