No more typing reviews! Try our Samantha, our new voice AI agent.

Pros & Cons summary

Buyer's Guide

Get pricing advice, tips, use cases and valuable features from real users of this product.
Get the report

Prominent pros & cons

PROS

Wazuh is highly valued for its integration capabilities with both cloud and on-premises environments, particularly for its seamless interaction with AWS cloud-native services.
The cost-effectiveness of Wazuh, being free with features similar to premium market solutions, is a significant advantage for many users.
Wazuh's comprehensive compliance management features fully comply with PCI DSS and GDPR standards, making it supportive in various regions.
Wazuh's extensive security features include file integrity monitoring, vulnerability scanning, host-based intrusion detection, and custom rules for detecting malicious activities.
Wazuh supports easy deployment with robust documentation and a wide range of built-in modules for various security needs.

CONS

Wazuh struggles with covering sources of events as effectively as Splunk.
The next release should target large enterprises, as they often avoid open source offerings, and Wazuh needs more robust features suited for such clients.
Threat intelligence is a significant oversight, needing in-built integration for real-time alerts and feedback in security incidents.
Scalability presents a challenge, particularly with log volume management in its on-prem version and distributed architecture utilizing Elastic DB.
Wazuh has limitations in automation for incident responses and needs enhancements in log data analysis for better detection and security.
 

Wazuh Pros review quotes

reviewer2711757 - PeerSpot reviewer
Cyber Security Software Engineer at a tech services company with 11-50 employees
Jun 3, 2025
I recommend Wazuh to everyone and believe more platforms, not just SIEM and XDR capability platforms, should be open source, allowing people to leverage these tools for the greater good.
Ebenezer Okoh - PeerSpot reviewer
Security Consultant at ebenezer.okoh@agorasecurity.it
Jun 3, 2025
Overall, I rate Wazuh a nine out of ten.
MohamedAdel1 - PeerSpot reviewer
Tech Lead at a tech vendor with 51-200 employees
Dec 24, 2025
When we talk about functionality, the most valuable feature or function I have found in Wazuh is Wazuh EDR agent with EDR capabilities.
Learn what your peers think about Wazuh. Get advice and tips from experienced pros sharing their opinions. Updated: April 2026.
893,244 professionals have used our research since 2012.
Sandip_Patel - PeerSpot reviewer
Student at Dakota State University
Nov 22, 2024
Wazuh's most valuable features include file monitoring and compliance reporting, which do not require excessive costs.
MS
Software Engineer at i2c Inc.
Jul 10, 2024
The product's initial setup phase was easy.
SC
Security Operations Center Analyst at mailbox.org
Feb 28, 2025
I would recommend Wazuh to others.
reviewer2590542 - PeerSpot reviewer
Tech Lead at a tech vendor with 201-500 employees
Nov 4, 2024
We found the MITRE framework mapping and the agent enrollment service to be the most valuable features of Wazuh.
Godwin Edmond - PeerSpot reviewer
Senior Security Information Analyst at Carbon MFB
Oct 21, 2024
The most valuable feature of Wazuh is its EDR capabilities.
NH
CEO at Intrust Labs
Jul 11, 2024
The solution is easy to maintain.
SyedAli17 - PeerSpot reviewer
Assistant Director at PTA
Sep 25, 2023
Some of the strengths of Wazuh that stand out for us include its scalability when deployed on Azure, its open-source nature, which allows for customization based on our needs, and its compatibility with various security solutions like threat intelligence platforms.
 

Wazuh Cons review quotes

reviewer2711757 - PeerSpot reviewer
Cyber Security Software Engineer at a tech services company with 11-50 employees
Jun 3, 2025
Wazuh requires substantial maintenance. The indexer frequently times out, requiring system restarts. When it comes to errors, debugging takes considerable time.
Ebenezer Okoh - PeerSpot reviewer
Security Consultant at ebenezer.okoh@agorasecurity.it
Jun 3, 2025
When I face a challenge, I prefer not to spend too much time on it and may move to another solution that will give us the results.
MohamedAdel1 - PeerSpot reviewer
Tech Lead at a tech vendor with 51-200 employees
Dec 24, 2025
However, in the long term, if you want to build a SOC center on Wazuh, I do not recommend it because it's not stable.
Learn what your peers think about Wazuh. Get advice and tips from experienced pros sharing their opinions. Updated: April 2026.
893,244 professionals have used our research since 2012.
Sandip_Patel - PeerSpot reviewer
Student at Dakota State University
Nov 22, 2024
An issue I noticed is with tag values in certain rules not functioning properly.
MS
Software Engineer at i2c Inc.
Jul 10, 2024
Wazuh currently fails to provide its users with AI and ML.
SC
Security Operations Center Analyst at mailbox.org
Feb 28, 2025
There is room for improvement by integrating more AI into Wazuh. It requires constant nurturing, as I have to provide it with code and specific requirements.
reviewer2590542 - PeerSpot reviewer
Tech Lead at a tech vendor with 201-500 employees
Nov 4, 2024
The support channel is not optimal, and extensive research is required on our part to implement Wazuh effectively.
Godwin Edmond - PeerSpot reviewer
Senior Security Information Analyst at Carbon MFB
Oct 21, 2024
So far, the recent updates have addressed most challenges we previously faced.
NH
CEO at Intrust Labs
Jul 11, 2024
The product's configuration part and lack of AI capabilities are some of the major concerns associated with Wazuh.
SyedAli17 - PeerSpot reviewer
Assistant Director at PTA
Sep 25, 2023
One area where Wazuh could use some improvement is in its reporting mechanism, especially for high-level management like CSOs and CEOs.