Wazuh pros and cons

Vendor: Wazuh

3.7 out of 5

46 reviews
79% willing to recommend

140 followers

Pros & Cons summary

Wazuh integrates easily but requires enhancements in detection, scalability, and cloud support. Its robust ELK investigation and cost-effective implementation are notable, yet it lacks threat intelligence feeds and AI capabilities. Wazuh's compliance management excels with PCI DSS and GDPR standards, although regional support is missing. Essential features include syscheck and vulnerability resolution, but integration options need expansion. Despite its open-source nature, Wazuh's on-premises scalability and feature set require further development for competitive edge.

Buyer's Guide

Get pricing advice, tips, use cases and valuable features from real users of this product.

Get the report

Prominent pros & cons

PROS

MITRE ATT&CK correlation and easy integration make Wazuh valuable for combining with other environments, cloud applications, and on-premises applications.

Wazuh offers strong features like ELK for investigations, vulnerability scanning, host-based intrusion detection, and file integrity monitoring, integrating seamlessly with AWS cloud-native services.

Its open-source nature allows for cost-effective, customizable security solutions that include compliance with PCI DSS and GDPR standards and efficient SCA capabilities.

Valuable features include scalability on platforms like Azure and built-in capabilities for malware detection, inventory management, and vulnerability management, bolstered by machine learning data handling.

The platform provides comprehensive compliance management and is recognized for its enhanced HDR version, built-in rules, and ability to define custom rules for detecting malicious activities.

CONS

Wazuh struggles with real-time monitoring, especially for Unix systems, and lacks a comprehensive threat intelligence integration, requiring users to seek out external intelligence for incident handling.

Wazuh's configuration and deployment processes are notably complex, proving to be time-consuming and challenging for integration, requiring significant manual setup and expertise.

Scalability is a recurring issue with Wazuh, particularly with the on-premise version, constraining its ability to manage a high volume of logs effectively and efficiently.

Technical support from Wazuh is often not optimal, with slow response times and insufficient assistance, which places a burden on users to conduct extensive independent research for effective implementation.

Wazuh lacks some critical features such as native support for enterprise solutions, comprehensive reporting mechanisms, and AI capabilities, which are essential for enhancing its functionality and meeting enterprise demands.

Wazuh Pros review quotes

Muhammad Muaaz Bin Zaka

Software Engineer at a computer software company with 1,001-5,000 employees

Dec 16, 2024

Wazuh offers numerous features, such as the ability to define custom rules for detecting malicious activities and remembering behaviors.