--- title: Wazuh Reviews meta_title: 'Wazuh Reviews 2026: Details, Pricing, & Features | G2' meta_description: Filter 70 reviews by the users' company size, role or industry to find out how Wazuh works for a business like yours. aggregate_rating: rating_value: 4.5 review_count: 70 scale: '5' date_modified: '2026-07-29' parent_category: name: Endpoint Protection url: https://www.g2.com/categories/endpoint-protection --- # Wazuh Reviews **Vendor:** Wazuh Inc. **Category:** [Endpoint Detection & Response (EDR) Software](https://www.g2.com/categories/endpoint-detection-response-edr) **Average Rating:** 4.5/5.0 **Total Reviews:** 70 ## About Wazuh Wazuh is a free and open source security platform that unifies XDR and SIEM capabilities. It protects workloads across on-premises, virtualized, containerized, and cloud-based environments. Wazuh, with over 30 million downloads per year, has one of the largest open-source security communities in the world. Wazuh helps organizations of all sizes protect their data assets against security threats. Learn more about the project at wazuh.com ## Wazuh Pros & Cons **What users like:** - Users appreciate the **ease of use** of Wazuh, finding it user-friendly and ideal for small-scale companies. (3 reviews) - Users value Wazuh's **affordability** , enjoying top-tier security features without the burden of high licensing fees. (2 reviews) - Users value the **high visibility and control** provided by Wazuh for comprehensive security event management. (1 reviews) - Users find Wazuh's **easy management** features enhance usability, facilitating efficient operations and cost reduction. (1 reviews) - Users find the **easy setup** of Wazuh greatly beneficial for rolling out and managing security effectively. (1 reviews) - Experience Satisfaction (1 reviews) - Users find the **implementation ease** of Wazuh impressive, facilitating quick deployment and efficient monitoring. (1 reviews) - Log Management (1 reviews) - Management Ease (1 reviews) - Monitoring (1 reviews) **What users dislike:** - Users struggle with the **complex interface** , finding it challenging to navigate during setup and configuration. (2 reviews) - Users find Wazuh **not user-friendly** , struggling with steep learning curves and convoluted setup processes for new users. (2 reviews) - Users face **complicated implementation** challenges with the on-prem console, creating frustrations during setup and management. (1 reviews) - Users face a **steep learning curve** with Wazuh, finding initial setup and tuning time-consuming and challenging. (1 reviews) - Users find the **difficult setup** of Wazuh challenging, particularly due to its steep learning curve and time-consuming configurations. (1 reviews) - Integration Issues (1 reviews) - Learning Curve (1 reviews) - Limited Integration (1 reviews) - Not Intuitive (1 reviews) - Rules Management (1 reviews) ## Wazuh Reviews ### 1. integration of Amazon Linux AMI (64-bit) with Wazuh-The Open-Source Security Platform **Rating:** 5.0/5.0 stars **Reviewed by:** Nisarg S. | Cyber Security Expert, Mid-Market (51-1000 emp.) **Reviewed Date:** June 24, 2022 **What do you like best about Wazuh?** As an open-source security platform wazuh is providing so many features that sometimes even paid tools are not provided. Some Features are Security Analytics, Log Data Analysis, File Integrity Monitoring, and Configuration Assessment. **What do you dislike about Wazuh?** Nothing to dislike about Wazuh, you can use it in whatever manner you want to use as it is open-source. All type of customization is available. **What problems is Wazuh solving and how is that benefiting you?** It is saving costs for the organization for the security platform. Also unlike other paid security tools, we can use it at our convenience. ### 2. An end-to-end Host Intrusion Detection System and SIEM tool **Rating:** 4.5/5.0 stars **Reviewed by:** Rushabh M. | Software Engineer, Mid-Market (51-1000 emp.) **Reviewed Date:** December 05, 2021 **What do you like best about Wazuh?** - Well documented - Helpful community on slack - Easy on-premise setup; if you don't want to use their cloud service - Easy integration with Elasticsearch and Kibana - Convenient Kubernetes deployment guide - It is pretty configurable. Integration with Slack and email for receiving alerts is seamless. - Open source and free - Distributed system for better availability for large systems **What do you dislike about Wazuh?** - Coverage for all operating systems. It lacks some features for a few operating systems. - Learning curve in understanding the system - Some services can drain your host machines, requires you to monitor and adjust the configs to make it optimum. **Recommendations to others considering Wazuh:** - Has some learning curve if you want to set it up yourself. But not impossible. There is good documentation and a helpful community that will unblock you any chance they get. - It took our team (two engineers and one security engineer) to host the on-premise system using Elasticsearch and deploy a distributed HIDS system in three months, although those were some long hours. The initial setup took over a month, and then we spent most of our time ensuring the Wazuh agents didn't eat up the majority of our machine resources. - If you wish to avoid the setup time and effort, go for their managed solution. However, that isn't cheap, and I haven't used it, so I can't comment on its benefits. **What problems is Wazuh solving and how is that benefiting you?** - Wazuh helped us monitor all the host machines in our production environment. - Logging suspicious activity, instrumenting machine health (needs some work), checking the packages installed on hosts, and detecting vulnerabilities. - It has been beneficial in identifying shellshock attacks and mitigating them for hosts with the older version of operating systems. ### 3. Wazuh is open source cyber Security solution with EDR and HIDS/NIDS based on ELK stack **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Information Technology and Services | Enterprise (> 1000 emp.) **Reviewed Date:** April 22, 2022 **What do you like best about Wazuh?** Very easy to configure and deploy, centralized management of agents, can be configured to work with prowler which is excellent to monitor AWS environment **What do you dislike about Wazuh?** I believe documentation is not that detailed, gui is a little complex for my taste **What problems is Wazuh solving and how is that benefiting you?** We are using wazuh as our SIEM and EDR solution to detect and respond to threats ### 4. Wazuh-Best Community and Tech Support **Rating:** 5.0/5.0 stars **Reviewed by:** Pradeep G. | Security Engineer II, Enterprise (> 1000 emp.) **Reviewed Date:** December 03, 2021 **What do you like best about Wazuh?** Wazuh is an open-source security platform that has execellent documentation, and it has brilliant community support on slack; people are available to help you out in case of any doubt, and it's free. **What do you dislike about Wazuh?** Nothing so far, been using it for many years now. **What problems is Wazuh solving and how is that benefiting you?** Wazuh is excellent in doing Security Monitoring, EDR support, Compliance management, log collection, Incident Response, and many more things. ### 5. Excellent open source tool **Rating:** 4.0/5.0 stars **Reviewed by:** Navin R. | SOC Analyst, Mid-Market (51-1000 emp.) **Reviewed Date:** December 10, 2021 **What do you like best about Wazuh?** 1. UI for the wazuh 2. Easy customization 3. Easy deployment on windows **What do you dislike about Wazuh?** 1. little harder to implement in Linux system **What problems is Wazuh solving and how is that benefiting you?** 1. we have implemented wazuh in our working environment and checked vulnerabilities in the office. ### 6. Wazuh- File integrity monitoring **Rating:** 5.0/5.0 stars **Reviewed by:** Lakhan K. | DevOps Engineer, Mid-Market (51-1000 emp.) **Reviewed Date:** December 03, 2021 **What do you like best about Wazuh?** Wazuh-Support and allrounder tool that can be easily deployed on any system being Open-source. **What do you dislike about Wazuh?** Documentations needs to be updated on regular basis. **What problems is Wazuh solving and how is that benefiting you?** File integrity monitoring. Can be easily deployed and support to monitor multiple OS. ### 7. Best alternative for a SIEM solution **Rating:** 4.5/5.0 stars **Reviewed by:** Pradeep G. | Security Engineer, Enterprise (> 1000 emp.) **Reviewed Date:** December 28, 2021 **What do you like best about Wazuh?** Wazuh being A Open Source Security Platform its community, ease of use and documentation makes it better than even a paid solution. **What do you dislike about Wazuh?** There are certain things like alerting and notifying to end-user which is missing. **What problems is Wazuh solving and how is that benefiting you?** It fulfills all the needs of a SIEM solution for us. ### 8. Best Open source security tool **Rating:** 5.0/5.0 stars **Reviewed by:** Satykam A. | Red Team Director, Mid-Market (51-1000 emp.) **Reviewed Date:** December 08, 2021 **What do you like best about Wazuh?** Incident detection and active response also the identification of latest vulnerabilities as well as indicators of compromises are the best features. **What do you dislike about Wazuh?** Overall good but UI can be improved to make it more attractive **Recommendations to others considering Wazuh:** The best OpeSource Tool with constant updates and improvements **What problems is Wazuh solving and how is that benefiting you?** Threat Hunting, Vulnerability Detection and management, incident detection and prevention. ### 9. Best in generating reports and mapping events with multiple frameworks **Rating:** 4.0/5.0 stars **Reviewed by:** Junaid M. | i, Small-Business (50 or fewer emp.) **Reviewed Date:** January 12, 2022 **What do you like best about Wazuh?** Integrity monitoring, automatic professional reporting with graphs **What do you dislike about Wazuh?** Use cases logic is not tuned correctly, need maturity **Recommendations to others considering Wazuh:** I will highly recommend this tool for better support, visibility and efficiency. **What problems is Wazuh solving and how is that benefiting you?** We are deploying agents of multiple OS and logs correlations. ### 10. Wazuh Review **Rating:** 4.0/5.0 stars **Reviewed by:** Jahanzaib A. | Cyber Security Engineer, Mid-Market (51-1000 emp.) **Reviewed Date:** December 19, 2021 **What do you like best about Wazuh?** The Most helpful insight is the community. Wazuh mentors are really generous and helpful. **What do you dislike about Wazuh?** Sometimes it's the upgrade to the environment that breaks some of the things. **What problems is Wazuh solving and how is that benefiting you?** It's very good in ingesting logs from multiple sources and correlating them centrally. The integrations are really great. ### 11. Wazuh Review **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Computer & Network Security | Mid-Market (51-1000 emp.) **Reviewed Date:** December 08, 2021 **What do you like best about Wazuh?** Wazuh is easy to use and easily integrate it with other tools. It's various module support is too good. **What do you dislike about Wazuh?** After wazuh upgrade it's decoder and rules not working same as before but it happens sometimes only. **Recommendations to others considering Wazuh:** Frankly speaking instead of using License verrsions of SIEM Tool it is far better to use Wazuh. **What problems is Wazuh solving and how is that benefiting you?** Using Wazuh we can have multiple log sources on single platfrom. Lots of issues have been solved using wazuh . ### 12. Easy to understand SIEM by using wazuh **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Computer & Network Security | Small-Business (50 or fewer emp.) **Reviewed Date:** November 19, 2021 **What do you like best about Wazuh?** User Friendly UI and Creating Dashboard is very easy **What do you dislike about Wazuh?** need to include industry-based firewall decoders in open source version **What problems is Wazuh solving and how is that benefiting you?** I have written decoders for firewalls and DB by manually without taking any supports. ### 13. I have been using Wazuh as SIEM as well as EDR. Also we can do our own customisation **Rating:** 5.0/5.0 stars **Reviewed by:** Jainam V. | Senior SOC Analyst, Mid-Market (51-1000 emp.) **Reviewed Date:** December 03, 2021 **What do you like best about Wazuh?** Integration with all type of tools and customisation can be done according to the requirements **What do you dislike about Wazuh?** Many of the decoders and rules doesnt work according to logs we onboard like office365 **What problems is Wazuh solving and how is that benefiting you?** Configuration Assessment, Vulnerability Detection, Endpoint Detection Recovery, ### 14. An Amazing Open Source HIDS **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Computer & Network Security | Small-Business (50 or fewer emp.) **Reviewed Date:** December 02, 2021 **What do you like best about Wazuh?** Wazuh is an easy to setup security solution that monitors and trigger alerts for your hosts. The vulnerability detection feature with MITRE ATT&CK framework is the best part. **What do you dislike about Wazuh?** At least give 1 month trial for wazuh cloud so that users can understand the product well before subscribing to it. **What problems is Wazuh solving and how is that benefiting you?** I tried using wazuh for monitoring an IoT Edge device and the wazuh agent helped me a lot with its vulnerability detection and logging features. ### 15. It was good experience **Rating:** 3.5/5.0 stars **Reviewed by:** Verified User in Computer Software | Enterprise (> 1000 emp.) **Reviewed Date:** December 04, 2021 **What do you like best about Wazuh?** Best part is you can modify it as per your requirments. You can add modules and you can add as much nodes as needed and availble for all platforms windows , linux etc. **What do you dislike about Wazuh?** The dashboard is not so awsome it has much room for improvement. **What problems is Wazuh solving and how is that benefiting you?** I used itfor log monitoring and file integrations check and it works fine. And yes somhow it benefits financially that we don't need to purchase any paid solution. ### 16. Wazuh the best open source security platform **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Banking | Enterprise (> 1000 emp.) **Reviewed Date:** December 04, 2021 **What do you like best about Wazuh?** Most useful to integrate endpoint logs to monitor security logs, cloud security, compliance reports. **What do you dislike about Wazuh?** Easily control the agents on UI and Correlation must be added with more rules. **Recommendations to others considering Wazuh:** Install it as soon as possible and most importantly it's free with full of features to use like EDR. **What problems is Wazuh solving and how is that benefiting you?** Monitoring infrastructure for compliance like PCI DSS and GDPR. Also for Cloud Security like AWS / Azure Audit logs. ### 17. Wazuh Review Based on My expirence **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Information Technology and Services | Small-Business (50 or fewer emp.) **Reviewed Date:** November 22, 2021 **What do you like best about Wazuh?** Wazuh UI and Creating/writing Dashboard is easy **What do you dislike about Wazuh?** Include many default decoders for network device **Recommendations to others considering Wazuh:** Best Tool to understand SIEM Structure **What problems is Wazuh solving and how is that benefiting you?** writing decoders for fortigate firewall ### 18. Easy to use and configure, lots of features on wazuh platform **Rating:** 4.5/5.0 stars **Reviewed by:** Arban K. | Senior Systems and Network Administrator, Mid-Market (51-1000 emp.) **Reviewed Date:** November 21, 2021 **What do you like best about Wazuh?** Ease of use and user friendly interface! **What do you dislike about Wazuh?** The automated install script cleaning up if prerequisites are not met **What problems is Wazuh solving and how is that benefiting you?** Compliance check ,log collection ### 19. Best open source application for SIEM. Thanks to entire team for this wonderful project. **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Information Technology and Services | Mid-Market (51-1000 emp.) **Reviewed Date:** November 24, 2021 **What do you like best about Wazuh?** 1. Easy setup 2. Proper documentation 3. Forum 4. Best features for SIEM 5. Alerting system **What do you dislike about Wazuh?** 1. Need to troubleshoot in deep 2. Needs advance skill to monitor the system in advance level **What problems is Wazuh solving and how is that benefiting you?** 1. End-user device monitoring 2. Threat detection system 3. End-user patch update information 4. Easy reporting ### 20. Good but hard to configure **Rating:** 2.5/5.0 stars **Reviewed by:** Verified User in Military | Enterprise (> 1000 emp.) **Reviewed Date:** November 28, 2021 **What do you like best about Wazuh?** Really good and easy to setup agents. Multiple functionality **What do you dislike about Wazuh?** but the main console lacks proper ui , documentation etc **What problems is Wazuh solving and how is that benefiting you?** CPU usage, network traffic and metrics observation at its finest ## Wazuh Discussions - [What is Wazuh - The Open Source Security Platform used for?](https://www.g2.com/discussions/what-is-wazuh-the-open-source-security-platform-used-for) - 1 comment - [View Wazuh pricing details and edition comparison](https://www.g2.com/products/wazuh/reviews?page=2§ion=pricing&secure%5Bexpires_at%5D=2026-08-01+05%3A09%3A05+-0500&secure%5Bsession_id%5D=13e4b1dc-b6b9-4ba7-b06e-cb8ee16b529b&secure%5Btoken%5D=5bdfdc5454be6f056067d01fc0d21d4bb0a5d74ef4199f04a88869374f45bb19&format=llm_user) ## Wazuh Integrations - [AWS CloudTrail](https://www.g2.com/products/aws-cloudtrail/reviews) - [Discord](https://www.g2.com/products/textaify-discord/reviews) - [Grafana Labs](https://www.g2.com/products/grafana-labs/reviews) - [Microsoft Defender for Endpoint](https://www.g2.com/products/microsoft-defender-for-endpoint/reviews) - [Microsoft Teams](https://www.g2.com/products/microsoft-teams/reviews) - [n8n](https://www.g2.com/products/n8n/reviews) - [Safetica](https://www.g2.com/products/safetica/reviews) - [Shuffle](https://www.g2.com/products/shuffle/reviews) - [TheHive](https://www.g2.com/products/thehive/reviews) - [VirusTotal](https://www.g2.com/products/virustotal/reviews) - [WatchGuard Network Security](https://www.g2.com/products/watchguard-network-security/reviews) ## Wazuh Features **Services - Endpoint Detection & Response (EDR) ** - Managed Services **Response** - Resolution Automation - Resolution Guidance - System Isolation - Threat Intelligence - Incident Investigation **System Control** - Device Control - Web Control - Application Control - Asset Management - System Isolation **Records** - Incident Logs - Incident Reports **Vulnerability Prevention** - Endpoint Intelligence - Firewall - Malware Detection **Management** - Incident Alerts - Incident Case Management - Workflow Management **Security Management** - Incident Reports - Security Validation - Compliance **Generative AI** - AI Text Generation - AI Text Summarization ## Top Wazuh Alternatives - [CrowdStrike Falcon Endpoint Protection Platform](https://www.g2.com/products/crowdstrike-falcon-endpoint-protection-platform/reviews) - 4.6/5.0 (415 reviews) - [SentinelOne Singularity Endpoint](https://www.g2.com/products/sentinelone-singularity-endpoint/reviews) - 4.7/5.0 (204 reviews) - [IBM QRadar SIEM](https://www.g2.com/products/ibm-ibm-qradar-siem/reviews) - 4.4/5.0 (283 reviews)