Lumu vs Wazuh comparison

Lumu Technologies and Wazuh are both solutions in the Extended Detection and Response (XDR) category. Lumu Technologies is ranked #18 with an average rating of 9.0, while Wazuh is ranked #5 with an average rating of 7.9. Lumu Technologies holds a 1.4% mindshare in XDR, compared to Wazuh’s 10.2% mindshare. Additionally, 100% of Lumu Technologies users are willing to recommend the solution, compared to 80% of Wazuh users who would recommend it.

Lumu

Read 8 Lumu reviews

1,503 Views
1,022 Comparison Views

100% willing to recommend

Wazuh

Read 49 Wazuh reviews

41,754 Views
11,691 Comparison Views

80% willing to recommend

Lumu

Wazuh

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Aug 25, 2025

Wazuh and Lumu compete in the cybersecurity solutions category. Wazuh appears to have the upper hand in threat detection and response, while Lumu shines in continuous compromise assessment due to its strategic intelligence capabilities.

Features: Wazuh features comprehensive threat detection, log analysis, and security monitoring, establishing itself as a robust open-source platform. Lumu excels in detecting network compromises, empowering organizations to manage threats proactively through continuous traffic analysis. Both solutions address unique aspects of security management, offering valuable tools to meet diverse needs.

Room for Improvement: Wazuh could enhance its user interface and provide more advanced analytics to cater to diverse client requirements. Improving documentation and increasing the range of vendor support options would also be advantageous. For Lumu, expanding compatibility with more cybersecurity tools and providing advanced reporting capabilities could elevate its effectiveness. Simplifying setup processes and offering more detailed customization options might further bolster its utility.

Ease of Deployment and Customer Service: Wazuh's deployment benefits from its open-source nature, suitable for users with in-house expertise, though vendor support is limited. It offers a flexible, self-directed deployment experience. Lumu focuses on streamlined integration and proactive customer engagement, ensuring ease of deployment with active support throughout the process, which enhances user experience.

Pricing and ROI: Wazuh's open-source offering allows for low setup costs, appealing to security-conscious organizations with necessary technical resources. In contrast, Lumu operates on a subscription model, perceived as costlier but offering rapid ROI due to swift compromise detection and focused intelligence services. Both solutions cater to different budgetary preferences, providing unique benefits aligned with their respective approaches.

To learn more, read our detailed Lumu vs. Wazuh Report (Updated: September 2025).

Buyer's Guide

Lumu vs. Wazuh

September 2025

Download the complete report

Helped 868,759 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Lumu

Ranking in Extended Detection and Response (XDR)

18th

Average Rating

9.2

Reviews Sentiment

7.7

Number of Reviews

Ranking in other categories

Intrusion Detection and Prevention Software (IDPS) (11th), Network Detection and Response (NDR) (6th)

Wazuh

Ranking in Extended Detection and Response (XDR)

5th

Average Rating

7.4

Reviews Sentiment

6.3

Number of Reviews

Ranking in other categories

Log Management (1st), Security Information and Event Management (SIEM) (2nd)

Mindshare comparison

As of October 2025, in the Extended Detection and Response (XDR) category, the mindshare of Lumu is 1.4%, up from 0.6% compared to the previous year. The mindshare of Wazuh is 10.2%, down from 12.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Extended Detection and Response (XDR) Market Share Distribution
Product	Market Share (%)
Wazuh	10.2%
Lumu	1.4%
Other	88.4%

Extended Detection and Response (XDR)

Featured Reviews

Juan Solano

IT Director at Atlantic Quantum Innovations

Protects against threats and handles it in time with moderate pricing

Mostly, Lumu is an automatic tool. We'll deploy on firewalls and DNS servers. Lumu detects every attack on our network. The other day, we had CLC, the command controller, and the tool reacted automatically. It detected the attack and immediately blocked it without intervention from my team. The improvement is in the security process, as it's now entirely automated. We no longer require a technician or engineer to monitor our network 24/7. Lumu updates with AI and global threat intelligence, which greatly assists us. Since our workload is lighter, Lumu handles all of our tasks. We're using FortiGate for the firewall and Kaspersky for endpoints. If you are going to Lumu, you need another solution for the endpoint. You need to integrate with other tools like firewalls or another antivirus. I recommend the solution based on the price, usability, and service offered by the solution. Overall, I rate the solution a nine out of ten.

Read full review

Ebenezer Okoh

Security Consultant at ebenezer.okoh@agorasecurity.it

Innovative platform enables proactive threat hunting and endpoint monitoring

I have not seen Wazuh moving in the direction of AI-driven threat detection projects myself, but since the market is moving that way, I wouldn't be surprised if they implemented it soon. My plans to increase the usage of Wazuh or switch to another tool depend on what my boss decides. We don't refer to any community support specifically, as we rely on other platforms such as GitHub or Discord, depending on the application. I recommend that as more companies come on board with Wazuh, it will motivate those who contribute to it, but I am also cautious that as it gains attention, a large company might buy it and change its course of business. Overall, I rate Wazuh a nine out of ten.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The context provided by the tool is very complete, it includes the miter matrix, playbooks, links, hashes, and much more."

"I like Lumu's simple user interface. When we deployed it, we got full access, allowing us to identify IP addresses on the network and connect machine names to users. It helped us identify and block threats via the firewall. I also appreciate the chat support and ticket closure process. We're currently reviewing network detection solutions, and my recommendations include Lumu, Sentinel, and a few others. Regarding functionality and user-friendliness, I would recommend Lumu over the others."

"The tool's support team helps partners resolve any problems with the product."

"Lumu protects against threats immediately and handles them in time."

"It's been helpful for overall extended network visibility."

"You can access external links, playbooks, MITRE Matrix, and a lot of information."

"Most of it is automated, so I do not have to watch it to get alerts."

"The automated response to incidents works effectively out of the box, and the number of interfaces and platforms it can work with is impressive."

"The most valuable feature of Wazuh is its EDR capabilities."

"It is excellent in terms of visualization and indexing services, making it a powerful tool for malware detection."

"Wazuh offers an enhanced HDR version that outperforms its competitors."

"I like the features we use, including malware detection, inventory, detection of hidden processes, and activity logs. Inventory is probably the most important feature. It tells us when processes and packages were installed and what they are, which is helpful."

"Regarding Wazuh, I find the SCA (Security Configuration Assessment) features most valuable. It's crucial for asset management and inventory, allowing us to monitorendpoints and servers' changes easily. This is particularly important for my customers, who aren't heavily focused on incident response but rely on asset management and inventories. Wazuh's compliance management features are very supportive, especially in regions like the Americas and Europe. However, it's less effective in the ANZ (Australia and New Zealand) region since Wazuh doesn't cater to the specific compliance standards there, such as those required in Australia. I appreciate that Wazuh fully complies with PCI DSS and GDPR standards, allowing us to generate necessary reports."

"I recommend Wazuh to everyone and believe more platforms, not just SIEM and XDR capability platforms, should be open source, allowing people to leverage these tools for the greater good."

"Wazuh's logging features integrate seamlessly with AWS cloud-native services. There are also Wazuh agent configurations for different use cases, like vulnerability scanning, host-based intrusion detection, and file integrity monitoring."

"The configuration assessment and Pile integrity monitoring features are decent."

More Wazuh pros

Cons

"Having a larger support network would be beneficial. Nobody I know has heard of Lumu, so they are in the same space as Darktrace or CrowdStrike, but people give blank stares."

"Nothing so far needs to be improved."

"It would be good if we could access the physical logs."

"The integration with different vendors and endpoints could be improved."

"I am happy with the current features. However, one important one is to improve the reports."

"The free version is minimal compared to the full version."

"Lumu's ability to discover threats is an area of concern where improvements are needed."

"The reports need improvement."

"Wazuh should come up with more in-built rules and integrations for the cloud."

"Wazuh requires substantial maintenance. The indexer frequently times out, requiring system restarts. When it comes to errors, debugging takes considerable time."

"The implementation is very complex."

"Wazuh is missing many things that a typical SIEM should have."

"So far, the recent updates have addressed most challenges we previously faced."

"The product's configuration part and lack of AI capabilities are some of the major concerns associated with Wazuh."

"I think that the next release should be more suitable for large enterprises, because currently they are not because large companies do not rely on open source solutions."

"A more structured approach, perhaps with modular UI components, to facilitate easier integration and navigation within the Wazuh platform for custom integrations would be beneficial."

More Wazuh cons

Pricing and Cost Advice

"It is the cheapest solution we found."

"Compared to Lumu, other solutions are more expensive. SentinelOne was a bit cheaper, and another provider's price structure is unclear, but Lumu fit our budget nicely. SentinelOne's cost depends on the number of devices, and it might be similar to Lumu's, depending on deployment."

"The tool is available at a good price. The tool offers a good and competitive price for customers."

"The current pricing is open source."

"They have a good pricing strategy for market expansion."

"Wazuh is totally free and open source. There are no licensing costs, only support costs if you need them."

"When I contacted customer care, they mentioned bundling options, that I found to be overall affordable."

"It is a free-of-cost solution."

"The product is cheaper compared to other tools."

"Wazuh is a good tool, but the open-source version has scalability limitations."

"Wazuh is not an expensive solution."

More Wazuh pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Extended Detection and Response (XDR) solutions are best for your needs.

See recommendations

868,759 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

10%

Educational Organization

10%

Insurance Company

Comms Service Provider

Computer Software Company

15%

Comms Service Provider

University

Manufacturing Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	5
Midsize Enterprise	1
Large Enterprise	4

By reviewers
Company Size	Count
Small Business	26
Midsize Enterprise	15
Large Enterprise	8

Questions from the Community

What do you like most about Lumu?

Lumu protects against threats immediately and handles them in time.

See all answers

What needs improvement with Lumu?

There is always room for improvement. I am not giving it a perfect score because I am sure there is something that could be enhanced.Having some sort of certification or training, along with more p...

See all answers

What is your primary use case for Lumu?

We use it as our managed SOC instead of contracting with an MSP. It coordinates endpoint and gives us a single pane of glass for our security events.It fulfills the role of a SIEM, serving as our d...

See all answers

What do you like most about Wazuh?

Wazuh is its flexibility and open-source nature, which allows us to tailor threat detection and response across diverse client environments. Its integration capabilities with SOAR, cloud platforms,...

See all answers

What needs improvement with Wazuh?

The lack of AI features is an issue at the moment in the industry. Forti provides user behavior capabilities, which I would want to see in Wazuh. In FortiSIEM, they provide user behavior understand...

See all answers

What is your primary use case for Wazuh?

At the moment, I'm working in software integration, so we are working with FortiGate. To research and get an idea, I did some investigation into Wazuh. They have already used Fortinet products. The...

See all answers

Comparisons

Darktrace vs Lumu

Compared 49% of the time

Stellar Cyber Open XDR vs Lumu

Compared 14% of the time

Vectra AI vs Lumu

Compared 8% of the time

Microsoft Defender XDR vs Lumu

Compared 7% of the time

Corelight Open NDR vs Lumu

Compared 5% of the time

More Lumu Competitors

Security Onion vs Wazuh

Compared 13% of the time

Elastic Stack vs Wazuh

Compared 12% of the time

Graylog Enterprise vs Wazuh

Compared 7% of the time

AlienVault OSSIM vs Wazuh

Compared 6% of the time

Elastic Security vs Wazuh

Compared 5% of the time

More Wazuh Competitors

Product Reports

Buyer's Guide

Lumu

September 2025

Download Lumu product report

Buyer's Guide

Wazuh

September 2025

Download Wazuh product report

Also Known As

No data available

Wazuh All-In-One Deployment

Overview

Lumu Technologies is a cyber-security company that illuminates threats, attacks, and adversaries affecting enterprises worldwide. Using actionable intelligence, Lumu provides a radical way to secure networks by enhancing and augmenting existing defense capabilities established over the past 25 years.

Lumu Technologies

Wazuh offers comprehensive security features like MITRE ATT&CK correlation, log monitoring, and cloud-native infrastructure. It ensures compliance and provides intrusion detection with high scalability and open-source flexibility, ideal for businesses seeking robust SIEM capabilities.

Wazuh stands out in security information and event management by providing efficient log aggregation, vulnerability scanning, and event correlation against MITRE ATT&CK. Its capability to integrate seamlessly with environments, manage compliance, and monitor files makes it suitable for cloud-native infrastructures and financial sectors. Despite its technical support needing enhancement and opportunities for improving AI integration and threat intelligence, its open-source nature and cost-effectiveness make it appealing. Users can leverage custom dashboards powered by Elasticsearch for precise data analysis, even though there is a desire for a more user-friendly interface and better enterprise solution integration. Deployment may be complex, but its features contribute significantly to fortified security postures.

What are the essential features of Wazuh?

MITRE ATT&CK Correlation: Aligns events with recognized adversary tactics and techniques.
Log Monitoring: Collects and analyzes logs for threat detection.
Cloud-Native Infrastructure: Supports modern cloud environments.
Vulnerability Scanning: Identifies potential security weaknesses.
File Integrity Monitoring: Ensures the integrity of sensitive files.
Open-Source Flexibility: Customizable and adaptable code base.

What benefits should users consider?

Cost-Effectiveness: Offers a budget-friendly security solution.
Ease of Use: Simplified setup and management.
Comprehensive Compliance Management: Aids in meeting regulatory requirements.
High Scalability: Grows with businesses and adapts to different environments.
Extensive Third-Party Integrations: Connects to various existing systems.

Industries like finance and cloud infrastructure heavily utilize Wazuh for its security strengths. By monitoring endpoints and ensuring compliance with frameworks, companies can improve security posture and swiftly detect anomalies. The platform's focus on event correlation and alerts for security incidents is particularly beneficial.

Free Report: Lumu vs. Wazuh

Find out what your peers are saying about Lumu vs. Wazuh and other solutions. Updated: September 2025.

DOWNLOAD NOW

868,759 professionals have used our research since 2012.

See our Lumu vs. Wazuh report.

See our list of best Extended Detection and Response (XDR) vendors.

We monitor all Extended Detection and Response (XDR) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.