What is Wazuh?
Unified XDR and SIEM platform that analyzes security data across endpoints, clouds, and networks to detect threats, respond to incidents, and ensure compliance.
Wazuh pricing
We don't have Wazuh's full plan breakdown yet (its pricing page resisted automated reading). Here's what we could confirm. Always check live pricing for exact numbers.
Open source with no license cost. Free cloud trial available.
What Wazuh does
The capabilities that matter for siem & soar software, normalised so it lines up with every alternative. “-” means we haven't confirmed it, not that it's missing.
- SIEM (log correlation & detection)
- ✓
- SOAR (playbooks / automated response)
- -
- UEBA (behavioural analytics)
- -
- Built-in threat intelligence
- ✓
- ML / anomaly detection
- ✓
- MITRE ATT&CK detection mapping
- ✓
- Case / incident management
- -
- Pricing basis
- Flat
- Deployment
- Hybrid
- Connector / content-pack breadth
- -
- Open-core available
- ✓
Platform & deployment
Independently observed- CLI
- macOS
- Linux
- Windows
- Cloud / SaaS
- Hybrid
- On-premise
- Self-hosted
Integrations (1)
Independently observed- Third-party threat intelligence feeds
Wazuh alternatives
Other siem & soar software we track, ranked by the same independent score.
The Vioscale score: one lens on the evidence
Not user reviews and not a paid placement: a confidence-weighted blend of the independent signals below (adoption, activity, security posture, and more), which you can sort and re-weight yourself. Vendors can correct their listing but can never move their rank, and stars are weighted low as a vanity metric. It is one way to read the evidence for Wazuh, not the verdict.
| Signal | Score | Weight | Contribution | Evidence |
|---|---|---|---|---|
| Github Activity | 63 | 0.10 | 6.6 | ✓ |
| Release Cadence | 95 | 0.06 | 5.5 | ✓ |
| Capabilities | 75 | 0.07 | 5.2 | ✓ |
| Price Level | 100 | 0.05 | 4.7 | ✓ |
| Github Stars | 80 | 0.03 | 2.3 | ✓ |
| Pricing Transparency | 25 | 0.06 | 1.5 | ✓ |
| Integrations | 9 | 0.07 | 0.6 | ✓ |
| Reliability | 0 | 0.10 | 0.0 | - |
| Security Posture | 5 | 0.23 | 0.0 | - |
| Package Downloads | 0 | 0.15 | 0.0 | - |
| Stackoverflow Activity | 0 | 0.07 | 0.0 | - |
Computed . Re-weight it by intent, or see the full method.
All data & sourcesshow ↓
Every value we hold, with its source, retrieval date, and confidence. This is the evidence behind the score: don't trust it, verify it.
Activity
| Attribute | Value | Evidence |
|---|---|---|
| Commits last 30d | 100 | mediumsource · 2026-07-31 · 65% |
Adoption
| Attribute | Value | Evidence |
|---|---|---|
| Github stars | 16,359 | highsource · 2026-07-31 · 90% |
Features
| Attribute | Value | Evidence |
|---|---|---|
| Capabilities | {"siem":true,"deployment":"hybrid","ml_detection":true,"threat_intel":true,"pricing_basis":"flat","open_core_available":true,"mitre_attack_mapping":true} | mediumsource · 2026-08-05 · 60% |
Integrations
| Attribute | Value | Evidence |
|---|---|---|
| Count | 1 | mediumsource · 2026-07-31 · 60% |
Language
| Attribute | Value | Evidence |
|---|---|---|
| Primary | C++ | highsource · 2026-07-31 · 90% |
Pricing
Release
| Attribute | Value | Evidence |
|---|---|---|
| Cadence days | 9 | mediumsource · 2026-07-31 · 70% |
Security
| Attribute | Value | Evidence |
|---|---|---|
| Gdpr | Yes | highsource · 2026-08-05 · 75% |