# Wazuh

Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.

Repository: https://github.com/wazuh/wazuh
Canonical: https://ross.abutalabs.com/products/wazuh
Homepage: https://wazuh.com/
Language: C++
License: NOASSERTION
License Family: other
Topics: security, compliance, log-analysis, vulnerability-detection, cybersecurity, file-integrity-monitoring, infosec, malware-detection, cloud-security, container-security, security-automation, security-tools, siem, xdr, configuration-assessement, incident-response, pci-dss, security-audit, security-hardening, wazuh
Last push: 2026-08-26T23:51:07+00:00
Link (homepage): https://wazuh.com/
Link (site_page): https://documentation.wazuh.com/current/index.html
Link (site_page): https://wazuh.com/about-us
Link (site_page): https://wazuh.com/install
Link (site_page): https://wazuh.com/platform/xdr

## Health v2 (maintenance only)
Score: 98/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 99, release rhythm 95, longevity 100
- inputs: {"age_days": 4040, "days_push": 7, "days_rel": 34, "gap_med": 28, "n_releases_24m": 22}
- flags: no_license
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 16691, forks 2455 (observed 2026-08-28T04:11:16.982582+00:00)

## What it is
Wazuh is a free, open source security platform that unifies XDR and SIEM capabilities for threat prevention, detection, and response across endpoints, containers, and cloud workloads. It consists of an endpoint security agent plus central server, indexer, and dashboard components that collect, analyze, and visualize security telemetry.

## Use cases
- monitor security events across endpoints and cloud workloads
- detect malware, rootkits, and intrusions on servers
- collect and analyze logs from systems and applications
- monitor file integrity and configuration changes
- detect vulnerabilities on monitored hosts
- meet PCI DSS and other regulatory compliance requirements
- automate incident response on endpoints
- hunt threats using telemetry and threat intelligence

## When to choose
- you need a free, self-hosted SIEM/XDR without license costs
- you want unified endpoint, container, and cloud security monitoring in one agent
- you must demonstrate regulatory compliance like PCI DSS
- you need file integrity monitoring, vulnerability detection, and log analysis together
- you want an open source alternative to commercial SIEM products

## When to avoid
- you need only a lightweight single-purpose tool rather than a full platform
- you cannot run dedicated Linux servers for the central components
- you require managed EDR with proprietary endpoint sensors and sandboxing
- your team lacks capacity to operate and tune a security monitoring stack

## Facets
- artifact type: application
- maturity: stable
- function: security, monitoring, alerting, logging, search-engine, vulnerability-scanning, analytics
- domain: security, monitoring, cloud-computing, legal
- platform: windows, self-hosted, cross-platform
- tags: siem, xdr, hids, file-integrity-monitoring, intrusion-detection, incident-response, log-analysis, threat-hunting, pci-dss, endpoint-security, malware-detection, compliance, devops, containers, linux, macos, docker, kubernetes

## Member repositories
- wazuh/wazuh (main) score 98
- wazuh/wazuh-docker (infra) score 98

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:11:16.982582+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-29T17:04:47.966026+00:00, confidence not recorded.
  - readme: https://github.com/wazuh/wazuh (fetched 2026-08-28T04:11:16.982582+00:00, sha 0d084194a699)
  - homepage: https://wazuh.com/ (fetched 2026-08-29T08:02:09.394466+00:00, sha b90c1cb5c95d)
  - site_page: https://documentation.wazuh.com/current/index.html (fetched 2026-08-29T08:02:09.443248+00:00, sha 106c60ebba6b)
  - site_page: https://wazuh.com/about-us (fetched 2026-08-29T08:02:09.497872+00:00, sha 72cb56280b02)
  - site_page: https://wazuh.com/install (fetched 2026-08-29T08:02:09.537289+00:00, sha bc0aeed9f55b)
  - site_page: https://documentation.wazuh.com/ (fetched 2026-08-29T08:02:09.560504+00:00, sha 7796d176f3db)
  - site_page: https://documentation.wazuh.com/current/quickstart.html (fetched 2026-08-29T08:02:09.562661+00:00, sha 2ccc094fa43b)
  - site_page: https://documentation.wazuh.com/current/getting-started/index.html (fetched 2026-08-29T08:02:09.564356+00:00, sha dc246ede041e)
  - site_page: https://wazuh.com/platform/xdr (fetched 2026-08-29T08:02:09.555491+00:00, sha 466659c19b9e)
  - site_page: https://wazuh.com/platform/siem (fetched 2026-08-29T08:02:09.558169+00:00, sha 463526b5bcc6)
- Data as of 2026-08-30T08:39:29.467469+00:00.