Try our new research platform with insights from 80,000+ expert users

OpenText Behavioral Signals vs Wazuh comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Nov 30, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
8.9
ArcSight Intelligence boosts security and ROI by automating threat detection, reducing false positives, and streamlining workflows with advanced analytics.
Sentiment score
3.7
Wazuh offers cost-effective security, reducing detection to an hour and response to two days, benefiting small businesses.
I have seen value in security cost savings with Wazuh, as using proprietary EDR versions could save us substantial money.
Security Consultant at ebenezer.okoh@agorasecurity.it
 

Customer Service

Sentiment score
6.7
OpenText Behavioral Signals' support is responsive and skilled, but resolution may be slow and feedback sometimes lacks depth.
Sentiment score
3.5
Users generally praise Wazuh's support, highlighting strong customer service and useful community resources, despite occasional delays in response times.
They responded quickly, which was crucial as I was on a time constraint.
Cyber Security Software Engineer at a tech services company with 11-50 employees
We use the open-source version of Wazuh, which does not provide paid support.
Tech Lead at a tech vendor with 201-500 employees
The documentation is good and provides clear instructions, though it's targeted at those with technical backgrounds.
Student at Dakota State University
 

Scalability Issues

Sentiment score
6.3
OpenText Behavioral Signals faces scalability challenges, while technologies like ArcSight Intelligence excel, prompting consideration of alternatives like Splunk.
Sentiment score
6.7
Wazuh is scalable and flexible, but deployment complexity and technical expertise are needed for handling large data sets.
It can accommodate thousands of endpoints on one instance, and multiple instances can run for different clients.
Security Operations Center Analyst at mailbox.org
Currently, I don't see any limitations in terms of scalability as Wazuh can still connect many endpoints.
Security Consultant at ebenezer.okoh@agorasecurity.it
Scalability depends on the configuration and the infrastructure resources like compute and memory we allocate.
Tech Lead at a tech vendor with 201-500 employees
 

Stability Issues

Sentiment score
8.4
OpenText Behavioral Signals is praised for its stability, receiving high ratings and fostering user trust through reliable performance.
Sentiment score
6.2
Wazuh is generally stable, though updates may cause issues; proper maintenance and installation minimize potential disruptions.
The stability of Wazuh is strong, with no issues stemming from the solution itself.
Tech Lead at a tech vendor with 201-500 employees
The stability of Wazuh is largely dependent on maintenance.
Security Operations Center Analyst at mailbox.org
The indexer frequently times out, requiring system restarts.
Cyber Security Software Engineer at a tech services company with 11-50 employees
 

Room For Improvement

OpenText and ArcSight require updates for usability, scalability, and pricing to compete with QRadar and Splunk effectively.
Wazuh needs user interface improvements, scalability, integration, enhanced cloud security, better documentation, and reduced resource consumption for effectiveness.
Machine learning is needed along with understanding user behavior and behavioral patterns.
Engineer - Information Security at N-Able (Pvt) Ltd
The integration modules are insufficiently developed, necessitating the creation of custom integration solutions using tools like Logstash and PubSub.
Tech Lead at a tech vendor with 201-500 employees
I think Wazuh should improve by introducing AI functionalities, as it would be beneficial to see AI incorporated in the threat hunting and detection functionalities.
Security Consultant at ebenezer.okoh@agorasecurity.it
 

Setup Cost

OpenText Behavioral Signals offers enterprise-priced licensing options with additional charges for new features not in the base license.
Wazuh is a cost-effective open-source platform with optional managed services and support, emphasizing affordability for enterprises.
Wazuh is completely free of charge.
Security Consultant at ebenezer.okoh@agorasecurity.it
I would definitely recommend Wazuh, especially considering Fortinet's licensing model which is confusing and overpriced in my opinion.
Engineer - Information Security at N-Able (Pvt) Ltd
Totaling around two lakh Indian rupees per month.
Tech Lead at a tech vendor with 201-500 employees
 

Valuable Features

OpenText Behavioral Signals synthesizes diverse logs, customizes environments, and enhances efficiency with a user-friendly, consolidated interface.
Wazuh offers cost-effective, flexible security solutions with features like SIEM, EDR, and compliance management for diverse environments.
Wazuh is a SIEM tool that is highly customizable and versatile.
Security Operations Center Analyst at mailbox.org
The system allows us to monitor endpoints effectively and collect security data that can be utilized across other platforms such as SOAR.
Security Consultant at ebenezer.okoh@agorasecurity.it
With this open source tool, organizations can establish their own customized setup.
Cyber Security Software Engineer at a tech services company with 11-50 employees
 

Categories and Ranking

OpenText Behavioral Signals
Ranking in Security Information and Event Management (SIEM)
40th
Average Rating
8.0
Reviews Sentiment
6.6
Number of Reviews
5
Ranking in other categories
User Entity Behavior Analytics (UEBA) (13th)
Wazuh
Ranking in Security Information and Event Management (SIEM)
2nd
Average Rating
7.4
Reviews Sentiment
6.1
Number of Reviews
50
Ranking in other categories
Log Management (1st), Extended Detection and Response (XDR) (5th)
 

Mindshare comparison

As of January 2026, in the Security Information and Event Management (SIEM) category, the mindshare of OpenText Behavioral Signals is 0.7%, up from 0.3% compared to the previous year. The mindshare of Wazuh is 7.3%, down from 15.3% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Security Information and Event Management (SIEM) Market Share Distribution
ProductMarket Share (%)
Wazuh7.3%
OpenText Behavioral Signals0.7%
Other92.0%
Security Information and Event Management (SIEM)
 

Featured Reviews

Pravir KumarSinha - PeerSpot reviewer
Information Security at Synechron
Has essential threat detection capabilities, but the features for intelligence need enhancement
We integrated this tool with our security infrastructure. We installed it on a Linux server, where we have a Logger and ESM installed. With the Linux server as the hub, we manage all the configurations and rules, including those for email triggers. The logs are routed through a connector to the Logger, allowing us to monitor our infrastructure effectively. The platform helps us improve threat detection capabilities. I recommend it to others and rate it a seven out of ten.
RS
Engineer - Information Security at N-Able (Pvt) Ltd
Has faced limitations in AI capabilities and pricing flexibility
Pricing-wise, Wazuh stands out, along with deployment flexibility and its documentation which is extremely good in comparison to Forti. The community support is also incredible. They have helped quite a bit because previously, we had a separate tool and management dashboard to do our compliance. With Wazuh, we receive that information without having to do anything extra. We just set up the SIEM and all of that information was automatically populated. The dashboards are very easy to understand and very quick with no lag or delay. I have experienced delays on Forti's dashboards, but not with Wazuh. Wazuh is quite good. In comparison to Forti, they are quite similar. They are very good at detection.
report
Use our free recommendation engine to learn which Security Information and Event Management (SIEM) solutions are best for your needs.
881,082 professionals have used our research since 2012.
 

Comparison Review

it_user186927 - PeerSpot reviewer
Director of Operations at a comms service provider with 10,001+ employees
Feb 16, 2015
Cybereason vs. Interset vs. SQRRL
Capture DB - they all use NoSQL db and hence solve the ad hoc query and 'go back in time' problem with current best of breed SIEM and DLP solutions that rely on real time analysis of incoming logs (and don't store them). This means deeper and quicker iterative threat analysis and assessment…
 

Top Industries

By visitors reading reviews
Government
17%
Computer Software Company
9%
Manufacturing Company
8%
Comms Service Provider
7%
Computer Software Company
12%
Comms Service Provider
11%
University
8%
Manufacturing Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business27
Midsize Enterprise15
Large Enterprise8
 

Questions from the Community

What do you like most about ArcSight Interset / Intelligence?
The platform helps us improve threat detection capabilities.
What needs improvement with ArcSight Interset / Intelligence?
The product could be improved in several areas; it currently requires significant enhancement. Compared to QRadar and Splunk, ArcSight Intelligence falls behind, placing it as the third choice amon...
What do you like most about Wazuh?
Wazuh is its flexibility and open-source nature, which allows us to tailor threat detection and response across diverse client environments. Its integration capabilities with SOAR, cloud platforms,...
What needs improvement with Wazuh?
Regarding compliance, I find it not stable. I do not recommend it for that purpose. It can comply with Wazuh NCA, which we have here in Saudi Arabia. Wazuh NCA has many frameworks starting with ECC...
What is your primary use case for Wazuh?
I have been working with Wazuh for two years, and I can explain how I use Wazuh. I did not use Wazuh as a SIEM solution. I use Wazuh as a tool for services we provide. This service is called compro...
 

Also Known As

ArcSight Interset / Intelligence, FileTrek, Interset UEBA, Micro Focus Interset UEBA, Micro Focus Interset, ArcSight Interset
Wazuh All-In-One Deployment
 

Overview

 

Sample Customers

Accuvant, Splunk Inc., NuTech, Box, rSolutions, Voodoo Technology Limited
Information Not Available
Find out what your peers are saying about OpenText Behavioral Signals vs. Wazuh and other solutions. Updated: December 2025.
881,082 professionals have used our research since 2012.