Wazuh - The Open Source Security Platform Pros and Cons

Wazuh SIEM stands out as an exceptional security solution that combines powerful threat detection with extensive monitoring capabilities. As a user, I am particularly impressed by its ability to integrate seamlessly with various data sources, providing a holistic view of our security posture. The platform’s ability to process and analyze large volumes of data in real-time has significantly enhanced our incident response capabilities Review collected by and hosted on G2.com.

While Wazuh SIEM is robust, the initial setup and configuration can be somewhat complex, especially for users without extensive SIEM experience. The documentation is detailed but could benefit from more examples and clearer step-by-step instructions for common use cases. Additionally, the learning curve can be steep for new users, and more interactive tutorials or guided setups would be beneficial. Review collected by and hosted on G2.com.

Great open source, free Security Operation Center for small and mid-size businesses. Very easy and fast deployment. Real-time monitoring of the connected endpoints. It integrates very well on the Windows and Linux platforms. If you need to make sure that your organization is HIPAA compliant, this tool will help you to verify your compliance in a few fast clicks Review collected by and hosted on G2.com.

The main dashboard is a little incomplete. Wazuh would greatly benefit from the implementation of aggregation issues (per issue). Currently, admin has to hope from endpoint to endpoint screen to see problematic areas Review collected by and hosted on G2.com.

"Wazuh - The Open Source Security Platform" is an impressive tool that offers comprehensive security solutions for both small-scale and enterprise-level environments. As an open-source platform, it provides users with the flexibility to tailor security measures according to their specific needs without the constraints of proprietary software.

Wazuh stands out as a powerful open-source security platform that effectively addresses modern cybersecurity challenges. Its comprehensive features, scalability, and active community support make it a valuable asset for organizations seeking robust protection against evolving threats. Review collected by and hosted on G2.com.

At this point of time i dont find any downside of wazuh. Review collected by and hosted on G2.com.

-Wazuh is opensource and free to use

-Easily scalable

-Can run in standalone server as well as in cluster mode

-Has great agent functioality

-Easy to onboard multiple data sources

-Supports 3rd party integrations for alerts and communications Review collected by and hosted on G2.com.

-I can not think of anything to dislike about except it may be reaource consuming sometimes Review collected by and hosted on G2.com.

Relatively easy to implement, needs a bit of time for proper configuration and management. It is a turnkey SIEM solution if you can deploy agents to all or most of your assets. Gives a lot of value from the beginning, even if it becomes really powerful only if it is properly customized and tailored to your needs. Gorgeous interface! Based on Elastic technology, this has a lot of value as it makes it easily scaled and customized. Review collected by and hosted on G2.com.

Very little known in Italy so it is difficult to find commercial support for it. Needs Kinux/Unix knowledge to be properly installed, configured and managed (lot of things are still only possible on the CLI). Cloud and container support are still minimal, unless you're ready to spend some time for writing your own parsers / integration modules. Review collected by and hosted on G2.com.

-Completely opensource

-Free to use

-Has great features such as active response, support for 3rd generation party integrations etc.

- Easy to configure and manage compared to other SIEM

-Can easily handle large amount of incoming logs

-Supports loads of data sources

-Easy to create visualization and perform analysis Review collected by and hosted on G2.com.

-Opensearch can be trickier to deal with

-May require more resources if logs are frequent and in large volume. Review collected by and hosted on G2.com.

Wazuh is a SIEM tool which can be integrated with so many security apps and it is very flexible. The wazuh-manager is powerful enough to manage all the different open source tools we want to integrate with a very easy and light configuration of the agent and as many people say wazuh is the world's no.1 open source SIEM tool. Review collected by and hosted on G2.com.

Well wazuh is quite helpful but when i am stuck i don't know what to do coz there is no support available if we get stuck. I personally had so many problems configuring graylog with wazuh. I am still stuck on an issue of proxy and i am seeking help from the wazuh community. Review collected by and hosted on G2.com.

What I like the most is its ease of use, its scalability, and its integration with other tools. Review collected by and hosted on G2.com.

the fact that it is not available on Windows Review collected by and hosted on G2.com.

Its comprehensive suite of security features covering intrusion detection, log analysis, file integrity monitoring, and compliance management.

The flexibility and scalability it offers, making it suitable for organizations of all sizes and industries.

Its active community support, providing valuable resources, insights, and collaboration opportunities. Review collected by and hosted on G2.com.

The initial setup process can be complex, especially for users with limited cybersecurity or system administration experience.

Some advanced features may have a steep learning curve, requiring additional training or support to fully utilize. Review collected by and hosted on G2.com.

--Wazuh excels in real-time threat detection.

Its interface is user-friendly and intuitive.

--Wazuh simplifies compliance management effortlessly.

--The platform seamlessly scales to meet growing demands.

--Active community support ensures timely assistance. Review collected by and hosted on G2.com.

Initial setup can be complex for users lacking technical expertise.

Limited documentation for customization may pose challenges for advanced users Review collected by and hosted on G2.com.