Logsign Next-Gen SIEM vs Wazuh comparison

Read 48 Wazuh reviews

45,325 Views
20,850 Comparison Views

80% willing to recommend

Logsign Next-Gen SIEM

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Sep 18, 2024

Logsign Next-Gen SIEM and Wazuh compete in the SIEM solutions category. Logsign appears to have the upper hand in customer support and deployment ease, while Wazuh excels in feature richness despite higher costs.

Features: Logsign Next-Gen SIEM is notable for its scalability, automated threat detection, and user-friendliness. Wazuh offers advanced threat intelligence, robust integration capabilities, and a comprehensive feature set suitable for complex environments.

Room for Improvement: Logsign users seek more integrations, better reporting functionalities, and enhanced options for customization. Wazuh users mention the complexity of setup, a steep learning curve, and a need for simplified configuration processes.

Ease of Deployment and Customer Service: Logsign Next-Gen SIEM is recognized for its straightforward deployment process and responsive customer support. Wazuh requires more expertise for effective deployment and receives mixed reviews on support.

Pricing and ROI: Logsign Next-Gen SIEM offers competitive pricing with satisfactory ROI regarding capabilities. Wazuh, being open-source, reduces initial setup costs but needs significant investment in setup and maintenance, affecting its ROI.

To learn more, read our detailed Logsign Next-Gen SIEM vs. Wazuh Report (Updated: July 2025).

Logsign Next-Gen SIEM vs. Wazuh

July 2025

Download the complete report

Helped 865,384 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Logsign Next-Gen SIEM

Ranking in Log Management

40th

Ranking in Security Information and Event Management (SIEM)

46th

Average Rating

7.6

Reviews Sentiment

7.1

Number of Reviews

Ranking in other categories

No ranking in other categories

Wazuh

Ranking in Log Management

1st

Ranking in Security Information and Event Management (SIEM)

2nd

Average Rating

7.4

Reviews Sentiment

6.7

Number of Reviews

Ranking in other categories

Extended Detection and Response (XDR) (5th)

Mindshare comparison

As of August 2025, in the Security Information and Event Management (SIEM) category, the mindshare of Logsign Next-Gen SIEM is 0.4%, up from 0.3% compared to the previous year. The mindshare of Wazuh is 11.8%, down from 16.4% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Security Information and Event Management (SIEM)

Featured Reviews

Ayaz Ahmed

Cyber Security Specialist at lums

Works well for threat detection and security

Improvements needed in Logsign SIEM are providing specific security alerts that can be filtered and configured more effectively. There should be a focus on delivering alerts tailored to specific needs rather than overwhelming users with numerous alerts. Additionally, incorporating more mature data about threats is necessary for better threat detection.

Read full review

Sandip_Patel

Student at Dakota State University

Evaluating robust file monitoring with insights for community support improvements

Wazuh's most valuable features include file monitoring and compliance reporting, which do not require excessive costs. These aspects are vital as they provide alerts for changes and facilitate the monitoring of compliance. The platform is also relatively easy to set up and operate. Reports are straightforward to extract and prove useful for compliance requirements.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Logsign provides sample logs within the product, allowing users to see how logs will appear before integration, which is a valuable feature for testing and understanding log formats."

"The most valuable features of Logsign SIEM are its cloud capabilities, alerting functionality, integration with Elastic Search, and configuration options."

"It has full automation and automated SIEM responses."

"The deployment is easy and they provide very good documentation."

"Regarding Wazuh, I find the SCA (Security Configuration Assessment) features most valuable. It's crucial for asset management and inventory, allowing us to monitorendpoints and servers' changes easily. This is particularly important for my customers, who aren't heavily focused on incident response but rely on asset management and inventories. Wazuh's compliance management features are very supportive, especially in regions like the Americas and Europe. However, it's less effective in the ANZ (Australia and New Zealand) region since Wazuh doesn't cater to the specific compliance standards there, such as those required in Australia. I appreciate that Wazuh fully complies with PCI DSS and GDPR standards, allowing us to generate necessary reports."

"The most valuable features are the modules and metrics."

"I like Wazuh because it is a lot like ELK, which I was already comfortable with, so I didn't have to learn from scratch."

"Its cost-effectiveness is the most valuable aspect."

"My company implemented Wazuh because it was relatively inexpensive. They could quickly get their hands on it to check a box for some audit and compliance."

"The log monitoring and analysis tools are great in addition to SIEM file activity monitoring."

"Wazuh offers numerous features, such as the ability to define custom rules for detecting malicious activities and remembering behaviors."

More Wazuh pros

Cons

"AI and machine learning need to be developed. If they develop those features, I think everything will be fine."

"Improvements needed in Logsign SIEM are providing specific security alerts that can be filtered and configured more effectively."

"I hope they address the pricing model for Logsign Next-Gen SIEM, especially regarding regional variations. The pricing should not differ based on the country of operation as it can lead to dissatisfaction among customers. A fixed pricing structure would be more favorable for us. I would also suggest enhancing the GUI interface and adding features similar to xFi Exchange from IBM Pure. This would streamline operations and save time for analysts."

"One area where Wazuh could use some improvement is in its reporting mechanism, especially for high-level management like CSOs and CEOs."

"It would be great if there could be customization for the decoder portion."

"Wazuh should come up with more in-built rules and integrations for the cloud."

"The support channel is not optimal, and extensive research is required on our part to implement Wazuh effectively."

"Wazuh needs more security and features, particularly visualization features and a health monitor."

"Log data analysis could be improved. My IT team has been looking for an alternative because they want better log data for malware detection. We are also doing more container implementation also, so we need better container security, log data analysis, auditing and compliance, malware detection, etc."

"Wazuh requires substantial maintenance. The indexer frequently times out, requiring system restarts. When it comes to errors, debugging takes considerable time."

"An issue I noticed is with tag values in certain rules not functioning properly."

More Wazuh cons

Pricing and Cost Advice

"Compared to other SIEMs, it has low pricing."

"Wazuh is open-source, therefore it is free. You can purchase support for $1,000 a year."

"Wazuh is free and open source."

"My client uses the open-source version of Wazuh."

"We use the free version of Wazuh."

"It is an open-source product."

"The product is cheaper compared to other tools."

"It is a cost-effective solution."

"The current pricing is open source."

More Wazuh pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Security Information and Event Management (SIEM) solutions are best for your needs.

See recommendations

865,384 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

11%

Comms Service Provider

11%

Government

University

Computer Software Company

15%

Comms Service Provider

University

Manufacturing Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

No data available

Questions from the Community

What needs improvement with Logsign Next-Gen SIEM?

It does not have much AI and machine learning features yet. They are developing them and will be releasing them in a few months.

What is your primary use case for Logsign Next-Gen SIEM?

We use Logsign SIEM for various tasks in our daily operations. One key use case is for forensic analysis. We also use it to monitor critical servers and generate security alerts for actions like lo...

What advice do you have for others considering Logsign Next-Gen SIEM?

Overall, I would rate it an eight out of ten. AI and machine learning need to be developed. If they develop those features, I think everything will be fine. I can recommend it. Not for large enterp...

What do you like most about Wazuh?

Wazuh is its flexibility and open-source nature, which allows us to tailor threat detection and response across diverse client environments. Its integration capabilities with SOAR, cloud platforms,...

What needs improvement with Wazuh?

That would require me to discuss with the Wazuh team regarding areas that could be improved, as I have numerous ideas. From a developer's perspective, this is a Linux system with an active communit...

What is your primary use case for Wazuh?

Wazuh is a SIEM platform with various applications in today's environment. Compliance checks have helped with regulatory requirements. I pulled in PCI DSS to check for file integrity monitoring. I ...

Splunk Enterprise Security vs Logsign Next-Gen SIEM

Comparisons

Compared 21% of the time

Grafana Loki vs Logsign Next-Gen SIEM

Compared 21% of the time

Falcon LogScale vs Logsign Next-Gen SIEM

Compared 15% of the time

IBM Watson for Cyber Security vs Logsign Next-Gen SIEM

Compared 14% of the time

ManageEngine Log360 vs Logsign Next-Gen SIEM

Compared 9% of the time

More Logsign Next-Gen SIEM Competitors

Security Onion vs Wazuh

Compared 13% of the time

Elastic Stack vs Wazuh

Compared 12% of the time

Graylog vs Wazuh

Compared 7% of the time

AlienVault OSSIM vs Wazuh

Compared 7% of the time

Elastic Security vs Wazuh

Compared 4% of the time

More Wazuh Competitors

Product Reports

Security Information and Event Management (SIEM)

August 2025

Download Logsign Next-Gen SIEM product report

Download Wazuh product report

June 2025

Overview

Logsign delivers automation-driven cyber security solutions and are committed to providing the smartest, easiest-to-use and most affordable cybersecurity detection and response solutions and value-added services. Logsign Next-Gen SIEM is an enterprise-grade SIEM, inline with our promise, it's easy-to-deploy, easy-to-use and affordable unlike the other enterprise-grade SIEM softwares.

Easy-to-deploy, easy-to-use and affordable SIEM for all.
Unlimited scalability, high availability - cluster SIEM, big data infrastructure.
Deploy on every environment, on-premise solution.
400+ predefined integrations and free plugin service.
Collects & stores unlimited data.
Threat hunting, fast search & investigation, advanced behavior analysis, IOC detection.
Real-time detection & prevention, wide correlation library based on Mitre Att&ck framework.
Real-time monitoring, predefined dashboards & reports, meeting compliance requirements (PCI DSS, ISO 27001, HIPAA, SOX and more).
Automated notifications, automated actions.
Flexible pricing options, and more information and for more automated response features, please look for our SOAR platform.

Logsign

Wazuh is an enterprise-ready platform used for security monitoring. It is a free and open-source platform that is used for threat detection, incident response and compliance, and integrity monitoring. Wazuh is capable of protecting workloads across virtualized, on-premises, containerized, and cloud-based environments.

It consists of an endpoint security agent and a management server. Additionally, Wazuh is fully integrated with the Elastic Stack, allowing users the ability to navigate through security alerts via a data visualization tool.

Wazuh’s agent can run on many different platforms, and is lightweight. It can successfully perform the tasks needed to detect threats in order to trigger responses automatically.
Wazuh manages the agents, can analyze agent data, and can scale horizontally.
Elastic Stack is where alerts are indexed and stored.

Wazuh Capabilities

Some of Wazuh’s most notable capabilities include:

Intrusion detection: Wazuh’s agents can detect hidden files, cloaked processes, or unregistered network listeners, as well as inconsistencies in system call responses. Wazuh’s server component uses a signature-based approach to intrusion detection, using its regular expression engine to analyze collected log data and look for indicators of compromise.
Log data analysis: Wazuh can read operating system and application logs, and securely forward them to a central manager for rule-based analysis and storage.
Integrity monitoring: File integrity monitoring can help identify changes in content, ownership, permissions, and attribute of files. Wazuh’s file integrity monitoring can be used in conjunction with threat intelligence.
Vulnerability detection: Wazuh agents can identify well-known vulnerable software so you can see where your weak spots are and take action before an attack can exploit them.
Configuration assessment: System and application configurations are monitored to make sure they are compliant with security policies. Periodic scans are used to detect applications that are known to be vulnerable, insecurely configured, or unpatched.
Incident response: Wazuh responds actively when active threats need to be addressed. It can perform countermeasures like blocking access to a system when a threat source is identified.
Regulatory compliance: Wazuh includes the security controls required to be compliant with industry regulations and standards.
Cloud security: Wazuh’s light-weight and multi-platform agents are commonly used to monitor cloud environments at the instance level. In addition, Wazuh helps monitor cloud infrastructure at an API level.
Security for containers: With Wazuh, you have increased security visibility into hosts and containers, allowing for easier detection of threats, anomalies, and vulnerabilities.

Wazuh Benefits

Some of the most valued benefits of Wazuh include:

No vendor lock-in
No license costs
Uses lightweight, multi-platform agents
Free community support

Wazuh Offers

Annual support and maintenance
Assistance with deployment and configuration
Training and instructional hands-on courses

Reviews From Real Users

"It's very easy to integrate Wazuh with other environments, cloud applications, and on-prem applications. So, the advantage is that it's easy to implement and integrate with other solutions." - Robert C., IT Security Consultant at Microlan Kenya Limited

“The MITRE ATT&CK correlation is most valuable.” - Chief Information Security Officer at a financial services firm

Sample Customers

Turkish Petroleum, Tırsan, DP World, SAC American Colleges, Robert College, Unlu&Co, UniCo Insurance Company, ETSTur, CK Energy, UEDAS Energy, Wilo, Eurocross Assistance, Deloitte Turkey, Incı GS Yuasa, Pappara, Bilgi University, Anadolu University, İstanbul University, The Ministry of Energy and Natural Resources, TRT, Anadolu Media Agency, Ministry of Family, Labour and Social Services, Ispark, Spor AS and wide range of enterprises in different industries.

Information Not Available