Microsoft Defender XDR and Wazuh compete in the cybersecurity solution category. Wazuh seems to have the upper hand due to its robust features and cost-effective nature, despite Microsoft Defender XDR's strong user support.
Features: Microsoft Defender XDR offers integration capabilities with a focus on threat intelligence, providing enhanced protection. It leverages its defensive machine learning to address potential threats effectively. Wazuh, being open-source, allows for customizable security configurations which cater to specific needs. It provides comprehensive log data analysis and a significant degree of adaptability, enhancing its functionality for personalized setups.
Room for Improvement: Microsoft Defender XDR needs enhancements in the initial setup process, which can be complex. Its system resource usage is perceived as high, impacting performance. Users also desire more customization options for specific industry requirements. Wazuh users call for better documentation to aid in troubleshooting and improvements in support response times. They also wish for a more streamlined integration process for various systems.
Ease of Deployment and Customer Service: Microsoft Defender XDR offers seamless integration with Microsoft products, facilitating an easier deployment process. Its customer service is acknowledged for substantial assistance. Wazuh’s adaptability across platforms is well-regarded, although users find the need for enhanced support services to match their deployment capabilities.
Pricing and ROI: Microsoft Defender XDR faces criticism for higher setup costs, though its comprehensive protection offers a promising return on investment. Wazuh provides a cost-effective setup due to its open-source nature, yielding satisfactory ROI through detailed security insights and reduced initial expenditure.
Ever since we turned on the M5 feature set back in June, we have seen a reduced number of potentially malicious clicks and faster alerting when incidents occur.
You get stuck in low-level support for way longer than you should, instead of them escalating the issue up the chain.
It's critical to escalate SEV B issues immediately to a domestic engineer.
The technical support from Microsoft Defender XDR has been disappointingly slow.
There is no dedicated technical support for Wazuh as it is open source.
The documentation is good and provides clear instructions, though it's targeted at those with technical backgrounds.
We use the open-source version of Wazuh, which does not provide paid support.
Microsoft Defender XDR shows tremendous scalability, much more so than on-premises solutions.
It is suitable for enterprise-level deployment but has room for improvement.
It can accommodate thousands of endpoints on one instance, and multiple instances can run for different clients.
Scalability depends on the configuration and the infrastructure resources like compute and memory we allocate.
The services within our ecosystem have been reliable, meeting their SLAs.
The service has remained consistently online, with any issues isolated to specific components, suggesting a well-designed and modular architecture.
The stability of Wazuh is largely dependent on maintenance.
The stability of Wazuh is strong, with no issues stemming from the solution itself.
Improvements are needed in automated response capabilities.
The licensing process needs improvement and clarification.
Microsoft could improve on threat hunting and build more on threat detection and handling.
The integration modules are insufficiently developed, necessitating the creation of custom integration solutions using tools like Logstash and PubSub.
There is room for improvement by integrating more AI into Wazuh.
An issue I noticed is with tag values in certain rules not functioning properly.
Microsoft purposefully obfuscates this through marketing ploys to hide costs.
I would rate the pricing as eight out of ten, indicating it is a reasonable cost for the product.
Licensing is somewhat confusing, particularly when presenting our pitch decks to stakeholders and leveraging key features in premium SKUs, but we managed with some assistance from Microsoft.
Totaling around two lakh Indian rupees per month.
Since Wazuh is open source, the pricing for support could be applicable to medium-sized companies without much issue.
With Microsoft threat intelligence information, it detects various types of threats, including insider attacks, malicious content, and data exfiltration.
The email protection feature is the most valuable because our risks primarily lie there, and it seems to be the most popular target.
Vulnerability assessment and just-in-time access are some valuable features of Defender for server plans.
The fact that it is open source means it is always being expanded, which is beneficial for customizing solutions for individual client requests.
Wazuh's most valuable features include file monitoring and compliance reporting, which do not require excessive costs.
We found the MITRE framework mapping and the agent enrollment service to be the most valuable features of Wazuh.
Microsoft Defender XDR is a comprehensive security solution designed to protect against threats in the Microsoft 365 environment.
It offers robust security measures, comprehensive threat detection capabilities, and an efficient incident response system. With seamless integration with other Microsoft products and a user-friendly interface, it simplifies security management tasks.
Users have found it effective in detecting and preventing various types of attacks, such as phishing attempts, malware infections, and data breaches.
Watch the Microsoft demo video here: Microsoft Defender XDR demo video.
Wazuh is an enterprise-ready platform used for security monitoring. It is a free and open-source platform that is used for threat detection, incident response and compliance, and integrity monitoring. Wazuh is capable of protecting workloads across virtualized, on-premises, containerized, and cloud-based environments.
It consists of an endpoint security agent and a management server. Additionally, Wazuh is fully integrated with the Elastic Stack, allowing users the ability to navigate through security alerts via a data visualization tool.
Wazuh Capabilities
Some of Wazuh’s most notable capabilities include:
Wazuh Benefits
Some of the most valued benefits of Wazuh include:
Wazuh Offers
Reviews From Real Users
"It's very easy to integrate Wazuh with other environments, cloud applications, and on-prem applications. So, the advantage is that it's easy to implement and integrate with other solutions." - Robert C., IT Security Consultant at Microlan Kenya Limited
“The MITRE ATT&CK correlation is most valuable.” - Chief Information Security Officer at a financial services firm
We monitor all Extended Detection and Response (XDR) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.