Wazuh
Wazuh provides an open source platform for security monitoring and threat detection.
- Based in
- San Jose, United States
- Founded
- 2015
- Ownership
- Private
About Wazuh
Wazuh provides an open source security platform that combines extended detection and response (XDR) and security information and event management (SIEM). It sells this platform to enterprises, offering a free version and a managed cloud service called Wazuh Cloud. The platform protects endpoints and cloud workloads across public clouds, private clouds, and on-premises data centres. The company's approach is open source, which means no licence cost and no vendor lock-in. Wazuh collects telemetry from endpoints, network devices, cloud workloads, and third-party APIs. It uses a universal agent for endpoint protection and integrates with third-party solutions. The platform offers threat hunting, behavioural analysis, automated response, vulnerability detection, and compliance reporting. Wazuh also provides training courses and consulting services to help users deploy, configure, and tune the platform.
Products
- WazuhAn open source security platform that unifies XDR and SIEM capabilities for endpoint and cloud workload protection.
- Wazuh CloudA managed cloud service that provides ready-to-use and scalable environments for security monitoring and endpoint protection.
- Wazuh agentA universal agent deployed on endpoints to detect and respond to cyber threats, perform file integrity monitoring, and assess vulnerabilities.
- Wazuh SCAA security configuration assessment capability that scans systems against the Center for Internet Security benchmark to identify misconfigurations.
- Wazuh active response moduleA module that automatically responds to threats using built-in or custom actions to mitigate potential impact.