Try our new research platform with insights from 80,000+ expert users

Graylog Security vs Wazuh comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Nov 30, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Graylog Security
Ranking in Security Information and Event Management (SIEM)
39th
Average Rating
8.6
Reviews Sentiment
7.5
Number of Reviews
2
Ranking in other categories
No ranking in other categories
Wazuh
Ranking in Security Information and Event Management (SIEM)
2nd
Average Rating
7.4
Reviews Sentiment
6.1
Number of Reviews
50
Ranking in other categories
Log Management (1st), Extended Detection and Response (XDR) (4th)
 

Mindshare comparison

As of December 2025, in the Security Information and Event Management (SIEM) category, the mindshare of Graylog Security is 0.6%, up from 0.5% compared to the previous year. The mindshare of Wazuh is 8.3%, down from 15.9% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Security Information and Event Management (SIEM) Market Share Distribution
ProductMarket Share (%)
Wazuh8.3%
Graylog Security0.6%
Other91.1%
Security Information and Event Management (SIEM)
 

Featured Reviews

Tony Zafiropoulos - PeerSpot reviewer
Owner/ Chief Engineer at Fixvirus.com
Aggregates logs in one place and helps to review data points
We tried Graylog Security, starting with their inexpensive open-source version. We tested it out and continued using it for a while. As for the main differences between Graylog Security and other vendors, some users might prefer cloud-based platforms over on-premises solutions. It isn't inherently cloud-native, but that might not matter much for some.
RS
Engineer - Information Security at N-Able (Pvt) Ltd
Has faced limitations in AI capabilities and pricing flexibility
Pricing-wise, Wazuh stands out, along with deployment flexibility and its documentation which is extremely good in comparison to Forti. The community support is also incredible. They have helped quite a bit because previously, we had a separate tool and management dashboard to do our compliance. With Wazuh, we receive that information without having to do anything extra. We just set up the SIEM and all of that information was automatically populated. The dashboards are very easy to understand and very quick with no lag or delay. I have experienced delays on Forti's dashboards, but not with Wazuh. Wazuh is quite good. In comparison to Forti, they are quite similar. They are very good at detection.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The tool aggregates logs. We can see the logs in one place."
"We use the solution to collect logs."
"I would recommend Wazuh to others."
"I like Wazuh because it is a lot like ELK, which I was already comfortable with, so I didn't have to learn from scratch."
"I like the features we use, including malware detection, inventory, detection of hidden processes, and activity logs. Inventory is probably the most important feature. It tells us when processes and packages were installed and what they are, which is helpful."
"Wazuh has very flexible and robust features."
"Wazuh automatically scans the host for CIS benchmarks for the latest updates and vulnerabilities and gives a host score. It provides a percentage of perceived risk due to of non patches or any missing patches on that work."
"The main thing I like about it is that it has an EDR."
"Wazuh's most beneficial features for our security needs are flexibility, built-in rules, integration capabilities, and documentation."
"Wazuh offers numerous features, such as the ability to define custom rules for detecting malicious activities and remembering behaviors."
 

Cons

"Graylog Security needs to incorporate security scorecards."
"Since it's an open-source tool, scalability is the main issue."
"They could include flexibility and customization capabilities by modifying for customers based on partner agreements."
"A lack of certain features creates limitations."
"Wazuh is missing many things that a typical SIEM should have."
"However, in the long term, if you want to build a SOC center on Wazuh, I do not recommend it because it's not stable."
"There's not much I like about Wazuh. Other products I've used were a lot more functional and user friendly. They came with reports and use cases out of the box. We need to configure Wazuh's alerts and monitoring capabilities manually. It'd be nice if we could select from templates and presets for use cases already built and coded."
"An issue I noticed is with tag values in certain rules not functioning properly."
"The computing resources are consuming and do not make sense."
 

Pricing and Cost Advice

"I rate the tool's pricing a one out of ten."
"When I contacted customer care, they mentioned bundling options, that I found to be overall affordable."
"Wazuh is totally free and open source. There are no licensing costs, only support costs if you need them."
"Wazuh is an open-source tool."
"The product is cheaper compared to other tools."
"Wazuh is a good tool, but the open-source version has scalability limitations."
"Wazuh is not an expensive solution."
"We use the free version of Wazuh."
"It is an open-source product."
report
Use our free recommendation engine to learn which Security Information and Event Management (SIEM) solutions are best for your needs.
879,371 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
16%
Educational Organization
10%
Retailer
8%
Financial Services Firm
6%
Computer Software Company
14%
Comms Service Provider
10%
University
8%
Manufacturing Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business27
Midsize Enterprise15
Large Enterprise8
 

Questions from the Community

What do you like most about Graylog Security?
The tool aggregates logs. We can see the logs in one place.
What needs improvement with Graylog Security?
Graylog Security needs to incorporate security scorecards.
What do you like most about Wazuh?
Wazuh is its flexibility and open-source nature, which allows us to tailor threat detection and response across diverse client environments. Its integration capabilities with SOAR, cloud platforms,...
What needs improvement with Wazuh?
The lack of AI features is an issue at the moment in the industry. Forti provides user behavior capabilities, which I would want to see in Wazuh. In FortiSIEM, they provide user behavior understand...
What is your primary use case for Wazuh?
At the moment, I'm working in software integration, so we are working with FortiGate. To research and get an idea, I did some investigation into Wazuh. They have already used Fortinet products. The...
 

Comparisons

 

Also Known As

No data available
Wazuh All-In-One Deployment
 

Overview

Find out what your peers are saying about Graylog Security vs. Wazuh and other solutions. Updated: December 2025.
879,371 professionals have used our research since 2012.