Wazuh is the dominant open-source SIEM and XDR platform, combining log analysis, file integrity monitoring, vulnerability detection, and endpoint agents in a free, self-hostable stack built on OpenSearch. It has one of the largest deployment bases in security operations, spanning homelabs to large enterprises, with a managed Wazuh Cloud offering for teams that do not want to run it. The software is entirely free; the company sells cloud hosting and support. It suits cost-conscious SOCs and anyone wanting SIEM capability without ingest-based pricing.
open-sourcexdrself-hostedopensearchfree
Overview
- Founded
- 2015
- Pricing tier
- Low
- Startup-friendly
- Yes
- Enterprise-ready
- Yes
SIEM
- Cloud-native
- No
- Threat detection
- Yes
- SOAR included
- No
- Free tier
- Yes
- Deployment
- Both