--- title: Wazuh Reviews meta\_title: 'Wazuh Reviews 2026: Details, Pricing, & Features | G2' meta\_description: Filter 71 reviews by the users' company size, role or industry to find out how Wazuh works for a business like yours. aggregate\_rating: rating\_value: 4.5 review\_count: 71 scale: '5' date\_modified: '2026-08-17' parent\_category: name: Endpoint Protection url: https://www.g2.com/categories/endpoint-protection --- # Wazuh Reviews & Product Details Claimed ###### Profile Status This profile is currently managed by Wazuh but has limited features. Are you part of the Wazuh team? [Upgrade your plan](https://sell.g2.com) to enhance your branding and engage with visitors to your profile! Wazuh is a free and open source security platform that unifies XDR and SIEM capabilities. It protects workloads across on-premises, virtualized, containerized, and cloud-based environments. Wazuh, with over 30 million downloads per year, has one of the largest open-source security communities in the world. Wazuh helps organizations of all sizes protect their data assets against security threats. Learn more about the project at wazuh.com * * * Seller [Wazuh Inc.](https://www.g2.com/sellers/wazuh-inc) Discussions [Wazuh Community](https://www.g2.com/products/wazuh/discuss) Languages Supported English Solution Type Best-of-Breed Overview by Victor Mansilla (Sr. Digital Marketing Specialist) Show More ## Value at a Glance Averages based on real user reviews. ### Time to Implement 2 months ### Return on Investment 15 months [ View More Pricing Information ](https://www.g2.com/products/wazuh/pricing) ## Top-Rated Alternatives [ ![CrowdStrike Falcon Endpoint Protection Platform](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "CrowdStrike Falcon Endpoint Protection Platform") CrowdStrike Falcon Endpoint Protection Platform 4.6/5(444) ](https://www.g2.com/products/crowdstrike-falcon-endpoint-protection-platform/reviews) [ ![SentinelOne Singularity Endpoint](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "SentinelOne Singularity Endpoint") SentinelOne Singularity Endpoint 4.7/5(214) ](https://www.g2.com/products/sentinelone-singularity-endpoint/reviews) [ ![IBM QRadar SIEM](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "IBM QRadar SIEM") IBM QRadar SIEM 4.4/5(339) ](https://www.g2.com/products/ibm-ibm-qradar-siem/reviews) [ View All Alternatives ](https://www.g2.com/products/wazuh/competitors/alternatives) ## User Insights Average based on 71 real user reviews. Implementation Time 2 months Perceived Cost $$$$$ [Log in to unlock pricing and user insights](/login) ## Wazuh Integrations (12) What do users say about integrations? Integration information sourced from real user reviews. [Show More Integrations](https://www.g2.com/products/wazuh/integrations) ![Karsh T.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Karsh T.") KT Karsh T. SOC Engineer Consulting Mid-Market (51-1000 emp.) 5/20/2026 "Centralized Monitoring and security Incidents Simplified" 4.5/5 What do you like best about Wazuh? I like Wazuh for its log integration and dashboards, which I find genuinely helpful. I also appreciate how well Wazuh integrates with other tools. On top of that, the secure configuration assessment is valuable, and I like that it natively supports multiple clouds as well as other SaaS platforms. Overall, it lets me monitor all my logs smoothly in one place, under a single pane of glass. Review collected by and hosted on G2.com. What do you dislike about Wazuh? Things that could be improved on Wazuh’s side include its indexing. In addition, the documentation on how to manage indices and handle data more effectively is something that could be added to or improved further. Another feature I’d like to see in Wazuh is a built-in case management system. I’d also like better multi-log correlation, meaning I should be able to correlate and coordinate logs from multiple different sources at the same time. Last but not least, the pricing for Wazuh Cloud could be revised to make it more affordable for those who don’t want to rely on an on-prem deployment. Review collected by and hosted on G2.com. What problems is Wazuh solving and how is that benefiting you? I use Wazuh for centralized monitoring, secure configuration assessments, and monitoring cloud systems and logs so I can proactively respond to incidents. I also use it to hunt threats and monitor my infrastructure, while relying on it as a central logging system as well. Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerIncentivizedSource: G2 invite ![Verified User in Information Technology and Services](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Information Technology and Services") UI Verified User in Information Technology and Services Mid-Market (51-1000 emp.) 7/28/2026 "All-in-One Open-Source SIEM/XDR with Powerful Customization and Integrations" 4.5/5 What do you like best about Wazuh? What I like most about Wazuh is how it brings SIEM, XDR, file integrity monitoring, vulnerability detection, log management, and compliance monitoring together in one open-source platform. It also integrates smoothly with tools like Elastic, supports a broad range of operating systems, and offers highly customizable rules and dashboards—all without expensive licensing costs. Review collected by and hosted on G2.com. What do you dislike about Wazuh? Wazuh can be complex to deploy and maintain, especially in larger environments. Initial configuration, rule tuning, and reducing false positives require time, and major upgrades or integrations can sometimes involve additional manual effort. Review collected by and hosted on G2.com. What problems is Wazuh solving and how is that benefiting you? Wazuh helps centralise security monitoring across multiple systems by collecting logs, detecting suspicious activity, and highlighting configuration or compliance issues in one place. It has improved visibility into our environment, reduced the time needed to investigate alerts, and made it easier to identify potential security issues before they become larger problems. Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerSource: Organic Review from User Profile ![Abhishek N.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Abhishek N.") AN Abhishek N. SOC L1 Engineer Mid-Market (51-1000 emp.) 6/4/2026 "Powerful SIEM Tool with Robust AI Features" 3.5/5 What do you like best about Wazuh? I love that Wazuh is open source and has active community support, along with support for various technologies like XDR, UEBA, threat hunting, and FIM. My favorite features are the scope and use case of the tool, especially the Anomaly Detector using AI and historical data patterns. The Anomaly Detector dashboard is user-friendly, and its integration with AI and machine learning utilizing the RCF algorithm is impressive. Review collected by and hosted on G2.com. What do you dislike about Wazuh? Wazuh lacks visual correlation, has heavy storage requirements, and complex SOAR integrations. The initial setup also requires many configurations compared to other SIEM tools, making it only moderately easy. Review collected by and hosted on G2.com. What problems is Wazuh solving and how is that benefiting you? Wazuh offers great community support and supports technologies like XDR, UEBA, and threat hunting. Its Anomaly Detector using AI and historical data patterns is a valuable feature. Review collected by and hosted on G2.com. Show More 6/7/2026 Current UserValidated ReviewerSource: Organic ![Gulsan P.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Gulsan P.") GP Gulsan P. Codeinyourself Small-Business (50 or fewer emp.) 8/13/2026 "Great Platform for Quick Threat Detection" 5/5 What do you like best about Wazuh? The platform streamlined our security monitoring process by facilitating real-time log analysis and automated vulnerability detection which saves me hours each week instead of manually checking logs and I like the immediate threat alerts that also give us clear visibility into our system health. Review collected by and hosted on G2.com. What do you dislike about Wazuh? Nothing to dislike about it thus far it has been a great security monitoring platform and even the broader team also seems to feel the same. Review collected by and hosted on G2.com. What problems is Wazuh solving and how is that benefiting you? It effectively connects all our system logs to a centralized dashboard which helps track security events easily and an unexpected benefit is how it catches system misconfigurations we didn't even know we had furthermore the automated alerts help improve our overall security without constant manual oversight. Review collected by and hosted on G2.com. Show More Validated ReviewerSource: Organic YG Yogesh G. Linux Administrator Information Technology and Services Mid-Market (51-1000 emp.) 1/27/2026 Business partner of the seller or seller's competitor, not included in G2 scores. "Powerful Open-Source On-Prem Security Monitoring with Easy Integration" 4.5/5 What do you like best about Wazuh? It’s an open-source platform that’s easy to install in an on-prem environment. I can easily create rules and decoders for custom logs, and the integrations are straightforward to set up. It also provides excellent tools for log analysis, vulnerability detection, FIM, threat detection, compliance management, and incident management. Deploying the agent across multiple hosts is simple via the command line. Wazuh supports real-time monitoring of system logs and configuration, with automated alerts and VM detection. The documentation is also well maintained. Review collected by and hosted on G2.com. What do you dislike about Wazuh? It’s very difficult for new users to learn and get started with. It also uses a lot of resources when working with large data. Sometimes, it causes problems when upgrading to a newer version. Review collected by and hosted on G2.com. What problems is Wazuh solving and how is that benefiting you? We are using Wazuh for file integrity monitoring, and the results for this purpose have been exceptional. You don’t need to spend any money if you want to try it. It also comes with many dashboards where you can view the number of vulnerabilities on the agents, agent syslogs, and other useful insights, and you can create a custom dashboard as well. Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerSource: Organic Review from User Profile ![Verified User in Computer Networking](/assets/icons/anonymous-avatar-purple-4ae1032bdb50ee5682003170c8184aee790d25958bd397abbd384ba52c596a7b.svg "Verified User in Computer Networking") AC Verified User in Computer Networking Small-Business (50 or fewer emp.) 3/12/2026 "Wazuh: FREE - Powerful, Customizable Security Monitoring with Smart Alerts" 5/5 What do you like best about Wazuh? Wazuh helps keep all your computers and servers safe by watching for bad behavior, checking for weaknesses, and sending alerts when something suspicious happens. It’s free, open, and can be customized to fit any setup, from small networks to large companies. Review collected by and hosted on G2.com. What do you dislike about Wazuh? Some common drawbacks of Wazuh are that it can be complex to set up and configure, especially for large environments, and managing rules, alerts, and integrations can require significant time and expertise. Additionally, its UI and reporting features are less polished compared to some commercial alternatives, which can make monitoring at scale more cumbersome. Review collected by and hosted on G2.com. What problems is Wazuh solving and how is that benefiting you? Wazuh detects security threats, monitors system activity, and checks for vulnerabilities, helping prevent breaches and maintain compliance. This benefits you by giving real-time alerts, centralized visibility, and actionable insights, so you can respond quickly to issues and keep your environment secure without manually checking each system. Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerIncentivizedSource: G2 invite ![Ayush G.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Ayush G.") AG Ayush G. Customer Success Engineer Computer & Network Security Small-Business (50 or fewer emp.) 1/29/2026 "Open-Source Security Platform with Strong Visibility and Control" 5/5 What do you like best about Wazuh? Wazuh is the level of visibility and control it provides over security events across the entire infrastructure. The real-time threat detection, log analysis, and compliance monitoring are very powerful for an open-source platform. It delivers enterprise-level security capabilities without high licensing costs. Review collected by and hosted on G2.com. What do you dislike about Wazuh? The main drawback is the steep learning curve, especially for new users during initial setup and tuning. Some configurations and rule customizations can be time-consuming, and the UI could be more intuitive. Better guided setup and clearer documentation for advanced use cases would help a lot. Review collected by and hosted on G2.com. What problems is Wazuh solving and how is that benefiting you? I use Wazuh for centralized security monitoring and threat detection, solving fragmented security visibility by centralizing logs. It helps us quickly detect threats and compliance issues, improving security posture without multiple tools. Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerIncentivizedSource: G2 invite GS Gibrain S. information security engineer Small-Business (50 or fewer emp.) 5/5/2026 "A Very Good, Fully Open-Source SIEM" 4/5 What do you like best about Wazuh? which is a very good SIEM and is completely open source Review collected by and hosted on G2.com. What do you dislike about Wazuh? that in order for it to work optimally, you need to spend a lot of time fine-tuning the settings Review collected by and hosted on G2.com. What problems is Wazuh solving and how is that benefiting you? traceability of connections, access, and specific file usage; vulnerability detection; and integration with various technologies Review collected by and hosted on G2.com. Show More Current UserValidated ReviewerSource: Organic ![naty d.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "naty d.") ND naty d. Security Engineer Small-Business (50 or fewer emp.) 2/26/2026 "Free, Open-Source, and User-Friendly SIEM for SMB" 4.5/5 What do you like best about Wazuh? The main reasons that i like about wazuh is being free and opensouce, having simpler learning curve and ease of use, it is user friendly and best choice for small scale companies Review collected by and hosted on G2.com. What do you dislike about Wazuh? In my openion the down side of wazuh is it is difficult to integrate it with 3rd party solutions, and don't have built in plugins to do so compared to other SIEMs in the ecosystem. Review collected by and hosted on G2.com. What problems is Wazuh solving and how is that benefiting you? The main problem that i used to tackel wazuh is endpoint security and log coorelation/normalization. i have deployed the agent in all of our company assets and able to analyze logs, better visibility regarding security events and much more. Review collected by and hosted on G2.com. Show More Validated ReviewerSource: Organic ![Parth R.](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Parth R.") PR Parth R. Cyber Security Intern Small-Business (50 or fewer emp.) 5/14/2026 "Wazuh Solution" 5/5 What do you like best about Wazuh? We can see all the different types by adding a field, which makes it easier to use. Review collected by and hosted on G2.com. What do you dislike about Wazuh? Many times the dashboard gets disconnected, and the logs come in with a delay. Also, there is no option for a normal user to switch the theme. Review collected by and hosted on G2.com. What problems is Wazuh solving and how is that benefiting you? It’s easy to configure, and I appreciate that it’s free and open source. Review collected by and hosted on G2.com. Show More Validated ReviewerSource: Organic ## Questions about Wazuh? Ask real users or explore answers from the community Get practical answers, real workflows, and honest pros and cons from the G2 community or share your insights. [ Ask about Wazuh ](https://www.g2.com/products/wazuh/discussions/new) GU Guest User • Last activity over 2 years ago What is Wazuh - The Open Source Security Platform used for? 0 Upvotes 1 [ Join the conversation ](https://www.g2.com/discussions/what-is-wazuh-the-open-source-security-platform-used-for) [ View all Discussions ](https://www.g2.com/products/wazuh/discuss) ## Pricing Insights Averages based on real user reviews. ### Time to Implement 2 months ### Return on Investment 15 months ### Perceived Cost $$$$$ [ View More Pricing Information ](https://www.g2.com/products/wazuh/pricing) Wazuh Comparisons ![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/small_square/small_square_46c4dc8d0219264af13b208604637e49/crowdsec.png "Product Avatar Image") CrowdSec 4.7/5(88) [ Compare Now ](https://www.g2.com/compare/crowdsec-vs-wazuh) ![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/small_square/small_square_5292562d6a2cb01ab3d34a4e57a3225a/sentinelone-singularity-endpoint.png "Product Avatar Image") SentinelOne Singularity... 4.7/5(214) [ Compare Now ](https://www.g2.com/compare/sentinelone-singularity-endpoint-vs-wazuh) ![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/small_square/small_square_8b3109519c061f3739371275d691098a/palo-alto-networks-cortex-xdr.png "Product Avatar Image") Cortex XDR 4.5/5(86) [ Compare Now ](https://www.g2.com/compare/palo-alto-networks-cortex-xdr-vs-wazuh) ##### ##### Wazuh Features Response Resolution Automation Resolution Guidance System Isolation Records Incident Logs Incident Reports Management Incident Alerts Incident Case Management Workflow Management Generative AI AI Text Generation AI Text Summarization [ View More Features ](https://www.g2.com/products/wazuh/features) ##### Categories on G2 [Endpoint Detection & Response (EDR)](https://www.g2.com/categories/endpoint-detection-response-edr)[Incident Response](https://www.g2.com/categories/incident-response) ##### Explore More [What HR service delivery platforms have a proven record of going live in under three months for a company that cannot afford a long rollout?](https://www.g2.com/discussions/what-hr-service-delivery-platforms-have-a-proven-record-of-going-live-in-under-three-months-for-a-company-that-cannot-afford-a-long-rollout)[What freelance platforms are most trusted for long-term remote software development contracts where reliability and payment protection actually matter?](https://www.g2.com/discussions/what-freelance-platforms-are-most-trusted-for-long-term-remote-software-development-contracts-where-reliability-and-payment-protection-actually-matter)[Best software for conducting user research in digital agencies](https://www.g2.com/discussions/best-software-for-conducting-user-research-in-digital-agencies) [Top-rated audit tools for companies](https://www.g2.com/discussions/what-are-the-top-rated-audit-tools-for-companies)[What field service management software can a small team actually learn and use without a long IT-heavy implementation?](https://www.g2.com/discussions/what-field-service-management-software-can-a-small-team-actually-learn-and-use-without-a-long-it-heavy-implementation)[Pros and Cons Details](https://www.g2.com/products/wazuh/reviews?qs=pros-and-cons) [Show MoreShow Less](javascript:void(0);)