Logz.io and Wazuh compete in the monitoring and security category. Logz.io often has the upper hand in scalability and comprehensive analytics, while Wazuh focuses on superior security capabilities.
Features: Logz.io offers advanced analytics, AI-driven insights, and extensive integrations, making it ideal for monitoring data across multiple platforms. Wazuh provides robust threat detection, compliance management, and real-time security monitoring.
Room for Improvement: Logz.io could enhance its initial setup costs and offer better budget-friendly options. Wazuh might need improved user-friendly deployment and more intuitive user interfaces.
Ease of Deployment and Customer Service: Logz.io benefits from cloud-based deployment, offering simplified setup and comprehensive support. Wazuh's open-source model allows customized deployment but demands more technical expertise, resulting in potentially complex setups.
Pricing and ROI: Logz.io involves higher initial costs with scalable analytics that often deliver strong ROI. Wazuh's open-source approach offers lower upfront costs, yet achieving ROI may require more time and technical investment.
I have seen value in security cost savings with Wazuh, as using proprietary EDR versions could save us substantial money.
They responded quickly, which was crucial as I was on a time constraint.
The documentation is good and provides clear instructions, though it's targeted at those with technical backgrounds.
We use the open-source version of Wazuh, which does not provide paid support.
It can accommodate thousands of endpoints on one instance, and multiple instances can run for different clients.
Currently, I don't see any limitations in terms of scalability as Wazuh can still connect many endpoints.
Scalability depends on the configuration and the infrastructure resources like compute and memory we allocate.
The stability of Wazuh is strong, with no issues stemming from the solution itself.
The indexer frequently times out, requiring system restarts.
The stability of Wazuh is largely dependent on maintenance.
Machine learning is needed along with understanding user behavior and behavioral patterns.
I think Wazuh should improve by introducing AI functionalities, as it would be beneficial to see AI incorporated in the threat hunting and detection functionalities.
The integration modules are insufficiently developed, necessitating the creation of custom integration solutions using tools like Logstash and PubSub.
Wazuh is completely free of charge.
I would definitely recommend Wazuh, especially considering Fortinet's licensing model which is confusing and overpriced in my opinion.
Wazuh is free to use, but there are licensing fees for third parties.
The fact that it is open source means it is always being expanded, which is beneficial for customizing solutions for individual client requests.
With this open source tool, organizations can establish their own customized setup.
The system allows us to monitor endpoints effectively and collect security data that can be utilized across other platforms such as SOAR.
Product | Market Share (%) |
---|---|
Wazuh | 10.2% |
Logz.io | 0.4% |
Other | 89.4% |
Company Size | Count |
---|---|
Small Business | 3 |
Midsize Enterprise | 1 |
Large Enterprise | 7 |
Company Size | Count |
---|---|
Small Business | 26 |
Midsize Enterprise | 15 |
Large Enterprise | 8 |
Logz.io is a leading cloud-native observability platform that enables engineers to use the best open source tools in the market without the complexity of operating, managing, and scaling them. Logz.io offers four products: Log Management built on ELK, Infrastructure Monitoring based on Prometheus, Distributed Tracing based on Jaeger, and an ELK-based Cloud SIEM. These are offered as fully managed, integrated cloud services designed to help engineers monitor, troubleshoot and secure their distributed cloud workloads more effectively. Engineering driven companies like Siemens, Unity and ZipRecruiter use Logz.io to simplify monitoring and security workflows, increasing developer productivity, reducing time to resolve issues, and increasing the performance and security of their mission-critical applications.
Wazuh offers comprehensive security features like MITRE ATT&CK correlation, log monitoring, and cloud-native infrastructure. It ensures compliance and provides intrusion detection with high scalability and open-source flexibility, ideal for businesses seeking robust SIEM capabilities.
Wazuh stands out in security information and event management by providing efficient log aggregation, vulnerability scanning, and event correlation against MITRE ATT&CK. Its capability to integrate seamlessly with environments, manage compliance, and monitor files makes it suitable for cloud-native infrastructures and financial sectors. Despite its technical support needing enhancement and opportunities for improving AI integration and threat intelligence, its open-source nature and cost-effectiveness make it appealing. Users can leverage custom dashboards powered by Elasticsearch for precise data analysis, even though there is a desire for a more user-friendly interface and better enterprise solution integration. Deployment may be complex, but its features contribute significantly to fortified security postures.
What are the essential features of Wazuh?Industries like finance and cloud infrastructure heavily utilize Wazuh for its security strengths. By monitoring endpoints and ensuring compliance with frameworks, companies can improve security posture and swiftly detect anomalies. The platform's focus on event correlation and alerts for security incidents is particularly beneficial.
We monitor all Security Information and Event Management (SIEM) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.