Wazuh

Wazuh is a free, open-source security platform that unifies a set of XDR and SIEM capabilities into a single framework. This platform offers log data analysis, intrusion and malware detection, file integrity monitoring, configuration assessment, vulnerability detection, support for regulatory compliance, and active response.

With Wazuh, users can protect workloads in on-premises, virtualized, containerized, and cloud environments. The Wazuh solution consists of three central components and a lightweight, universal security agent.

The Wazuh central components (server, indexer, and dashboard) analyze security data collected from agents. They can be configured on-premises or in the cloud using the Wazuh Cloud solution.

The agents are deployed on monitored endpoints to collect data and automatically respond to threats. For devices such as routers that do not support agent installation, Wazuh also provides agentless monitoring.

Also, Wazuh Cloud is commercially available, and is presented as a ready to use solution, with no additional hardware or software required, driving down the cost and complexity. Its environments are always updated to the latest version of Wazuh, with no manual maintenance or upgrades required. Wazuh Cloud fully protects data with a regular application of security patches and hardening practices, and is compliant with PCI DSS and SOC2.