Wazuh Reviews, Ratings & Features 2026 | Gartner Peer Insights

Security information and event management (SIEM) is a configurable system of record that collects, aggregates and analyzes security event data from on-premises and cloud environments. SIEM processes security event data for the purposes of threat detection, investigation and response. It natively supports data normalization and offers user-configurable detection content and reporting to orchestrate threat mitigation and satisfy compliance requirements. These solutions are delivered via a SaaS platform or client-hosted on-premises or private cloud. The security information and event management (SIEM) system must assist with: 1. Aggregating and normalizing data from various IT and operational technology (OT) environments. 2. Designing and executing near real-time monitoring and alerting content. 3. Enriching and investigating security events of interest. 4. Supporting manual and automated response actions. 5. Maintaining and reporting on current and historical event data.

Active

Find the top Security Information and Event Management Software with Gartner. Compare and filter by verified product reviews and choose the software that’s right for your organization.

Security Information and Event Management

Wazuh - The Open Source Security Platform

Wazuh

DIRECTOR, IT SECURITY AND RISK MANAGEMEN

The main reason is that Wazuh provides reliable security monitoring and actionable alerts. It integrates well with existing systems and has clear documentation. Areas for improvement include the learning curve for advanced configurations and the need for more intuitive dashboards. Overall, its a useful and dependable platform.

<50M USD

50M - 250M USD

250M - 500M USD

500M - 1B USD

1B - 3B USD

Gov't/PS/ED <5,000 Employees

IT MANAGER

If you just need a SIEM, then this works great, especially since it is free. It lacks some features, but it is better than nothing as it does allow logs from all servers. The admin console is simple to use and is pretty straightforward on how to use and search logs.

It Associate

Wazuh has many features and helps you to monitor your hosts (but also e.g. your 365 tenant), windows and linux operating systems are supported. Just install an agent on every machine.
The agent will check for vulnerabilities, for security compliance, for event logs and you will be able to generate reports about (you can customize logos and information about your Company), in PDF and Excel format. You can explore the details for every host.
Installation is quite easy , there is a script that will do all the task.
You can do queries while looking at  your logs and create filters.
A really good product, highly customizable. A little bit of technical knowledgment is required (you may need to access you wazuh server via ssh).

Elastic

Cisco Systems (Splunk)

CrowdStrike

Fortinet

Datadog

Graylog

ManageEngine

Rapid7

SolarWinds

Microsoft

Google

SentinelOne

LogRhythm

LogSentinel

Palo Alto Networks

Xcitium

AT&T Cybersecurity

Sumo Logic

Devo Technology

Blumira

Stellar Cyber

Logz.io

Trellix

NetWitness

Other...

Gurucul

Securonix

Wazuh is a security platform that aims to safeguard data assets across multiple environments including on-site, virtualized, containerized, and cloud-based. With both Extended Detection and Response (XDR) and Security Information and Event Management (SIEM) capabilities, it is used by organizations globally to protect against various types of security threats. The platform integrates a large open-source security community who contribute towards its enhancements.

Wazuh is a free and open-source security platform that unifies XDR and SIEM capabilities. It protects workloads across on-premises, virtualized, containerized, and cloud-based environments.

Wazuh, with over 10 million downloads per year, has one of the largest open-source security communities in the world. Wazuh helps organizations of all sizes protect their data assets against security threats.

Learn more about the project at wazuh.com

Reviews

Ratings Overview

Overall experience with

Favorable Review

Monitor Your Hosts with Wazuh: Features, Compliance and Reports

Critical Review

Free SIEM Solution Offers Simple Administration with Straightforward Log Management

Likes and dislikes about

likes

dislikes