Lumu vs Wazuh comparison

Lumu Technologies and Wazuh are both solutions in the Extended Detection and Response (XDR) category. Lumu Technologies is ranked #18 with an average rating of 9.0, while Wazuh is ranked #5 with an average rating of 7.9. Lumu Technologies holds a 1.4% mindshare in XDR, compared to Wazuh’s 10.2% mindshare. Additionally, 100% of Lumu Technologies users are willing to recommend the solution, compared to 80% of Wazuh users who would recommend it.

Lumu

Read 8 Lumu reviews

1,503 Views
1,022 Comparison Views

100% willing to recommend

Wazuh

Read 49 Wazuh reviews

41,754 Views
11,691 Comparison Views

80% willing to recommend

Lumu

Wazuh

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Aug 25, 2025

Wazuh and Lumu compete in the cybersecurity solutions category. Wazuh appears to have the upper hand in threat detection and response, while Lumu shines in continuous compromise assessment due to its strategic intelligence capabilities.

Features: Wazuh features comprehensive threat detection, log analysis, and security monitoring, establishing itself as a robust open-source platform. Lumu excels in detecting network compromises, empowering organizations to manage threats proactively through continuous traffic analysis. Both solutions address unique aspects of security management, offering valuable tools to meet diverse needs.

Room for Improvement: Wazuh could enhance its user interface and provide more advanced analytics to cater to diverse client requirements. Improving documentation and increasing the range of vendor support options would also be advantageous. For Lumu, expanding compatibility with more cybersecurity tools and providing advanced reporting capabilities could elevate its effectiveness. Simplifying setup processes and offering more detailed customization options might further bolster its utility.

Ease of Deployment and Customer Service: Wazuh's deployment benefits from its open-source nature, suitable for users with in-house expertise, though vendor support is limited. It offers a flexible, self-directed deployment experience. Lumu focuses on streamlined integration and proactive customer engagement, ensuring ease of deployment with active support throughout the process, which enhances user experience.

Pricing and ROI: Wazuh's open-source offering allows for low setup costs, appealing to security-conscious organizations with necessary technical resources. In contrast, Lumu operates on a subscription model, perceived as costlier but offering rapid ROI due to swift compromise detection and focused intelligence services. Both solutions cater to different budgetary preferences, providing unique benefits aligned with their respective approaches.

To learn more, read our detailed Lumu vs. Wazuh Report (Updated: September 2025).

Buyer's Guide

Lumu vs. Wazuh

September 2025

Download the complete report

Helped 872,778 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Lumu

Ranking in Extended Detection and Response (XDR)

18th

Average Rating

9.2

Reviews Sentiment

7.7

Number of Reviews

Ranking in other categories

Intrusion Detection and Prevention Software (IDPS) (11th), Network Detection and Response (NDR) (6th)

Wazuh

Ranking in Extended Detection and Response (XDR)

5th

Average Rating

7.4

Reviews Sentiment

6.3

Number of Reviews

Ranking in other categories

Log Management (1st), Security Information and Event Management (SIEM) (2nd)

Mindshare comparison

As of October 2025, in the Extended Detection and Response (XDR) category, the mindshare of Lumu is 1.4%, up from 0.6% compared to the previous year. The mindshare of Wazuh is 10.2%, down from 12.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Extended Detection and Response (XDR) Market Share Distribution
Product	Market Share (%)
Wazuh	10.2%
Lumu	1.4%
Other	88.4%

Extended Detection and Response (XDR)

Featured Reviews

Juan Solano

IT Director at Atlantic Quantum Innovations

Protects against threats and handles it in time with moderate pricing

Mostly, Lumu is an automatic tool. We'll deploy on firewalls and DNS servers. Lumu detects every attack on our network. The other day, we had CLC, the command controller, and the tool reacted automatically. It detected the attack and immediately blocked it without intervention from my team. The improvement is in the security process, as it's now entirely automated. We no longer require a technician or engineer to monitor our network 24/7. Lumu updates with AI and global threat intelligence, which greatly assists us. Since our workload is lighter, Lumu handles all of our tasks. We're using FortiGate for the firewall and Kaspersky for endpoints. If you are going to Lumu, you need another solution for the endpoint. You need to integrate with other tools like firewalls or another antivirus. I recommend the solution based on the price, usability, and service offered by the solution. Overall, I rate the solution a nine out of ten.

Read full review

Ebenezer Okoh

Security Consultant at ebenezer.okoh@agorasecurity.it

Innovative platform enables proactive threat hunting and endpoint monitoring

I have not seen Wazuh moving in the direction of AI-driven threat detection projects myself, but since the market is moving that way, I wouldn't be surprised if they implemented it soon. My plans to increase the usage of Wazuh or switch to another tool depend on what my boss decides. We don't refer to any community support specifically, as we rely on other platforms such as GitHub or Discord, depending on the application. I recommend that as more companies come on board with Wazuh, it will motivate those who contribute to it, but I am also cautious that as it gains attention, a large company might buy it and change its course of business. Overall, I rate Wazuh a nine out of ten.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"You can access external links, playbooks, MITRE Matrix, and a lot of information."

"Most of it is automated, so I do not have to watch it to get alerts."

"It's been helpful for overall extended network visibility."

"Lumu protects against threats immediately and handles them in time."

"I like Lumu's simple user interface. When we deployed it, we got full access, allowing us to identify IP addresses on the network and connect machine names to users. It helped us identify and block threats via the firewall. I also appreciate the chat support and ticket closure process. We're currently reviewing network detection solutions, and my recommendations include Lumu, Sentinel, and a few others. Regarding functionality and user-friendliness, I would recommend Lumu over the others."

"The context provided by the tool is very complete, it includes the miter matrix, playbooks, links, hashes, and much more."

"The tool's support team helps partners resolve any problems with the product."

"The automated response to incidents works effectively out of the box, and the number of interfaces and platforms it can work with is impressive."

"It's stable."

"It offers built-in modules for file integrity and vulnerability management."

"Wazuh's most valuable features include file monitoring and compliance reporting, which do not require excessive costs."

"Wazuh has very flexible and robust features."

"Some of the strengths of Wazuh that stand out for us include its scalability when deployed on Azure, its open-source nature, which allows for customization based on our needs, and its compatibility with various security solutions like threat intelligence platforms."

"Wazuh offers numerous features, such as the ability to define custom rules for detecting malicious activities and remembering behaviors."

"The log monitoring and analysis tools are great in addition to SIEM file activity monitoring."

"It's very easy to integrate Wazuh with other environments, cloud applications, and on-prem applications. So, the advantage is that it's easy to implement and integrate with other solutions."

More Wazuh pros

Cons

"I am happy with the current features. However, one important one is to improve the reports."

"It would be good if we could access the physical logs."

"Lumu's ability to discover threats is an area of concern where improvements are needed."

"The reports need improvement."

"Having a larger support network would be beneficial. Nobody I know has heard of Lumu, so they are in the same space as Darktrace or CrowdStrike, but people give blank stares."

"The free version is minimal compared to the full version."

"The integration with different vendors and endpoints could be improved."

"Nothing so far needs to be improved."

"There could be a hardware monitoring tool for the solution."

"The computing resources are consuming and do not make sense."

"Scalability is a challenge because it is distributed architecture and it uses Elastic DB. Their Elastic DB doesn't allow open source waste application."

"Wazuh should come up with more in-built rules and integrations for the cloud."

"There is room for improvement by integrating more AI into Wazuh. It requires constant nurturing, as I have to provide it with code and specific requirements."

"Wazuh currently fails to provide its users with AI and ML."

"A more structured approach, perhaps with modular UI components, to facilitate easier integration and navigation within the Wazuh platform for custom integrations would be beneficial."

"We would like to see more improvements on the cloud."

More Wazuh cons

Pricing and Cost Advice

"Compared to Lumu, other solutions are more expensive. SentinelOne was a bit cheaper, and another provider's price structure is unclear, but Lumu fit our budget nicely. SentinelOne's cost depends on the number of devices, and it might be similar to Lumu's, depending on deployment."

"It is the cheapest solution we found."

"The tool is available at a good price. The tool offers a good and competitive price for customers."

"My client uses the open-source version of Wazuh."

"Wazuh is open-source, so I think it's an option for a small organization that cannot go for enterprise-grade solutions like Splunk."

"Wazuh is a cheaply priced product."

"Wazuh is totally free and open source. There are no licensing costs, only support costs if you need them."

"Wazuh is an open-source tool."

"The product price is neither too high nor too low."

"There is not a license required for Wazuh."

"Wazuh has a community edition, and I was using that. It's free and open source."

More Wazuh pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Extended Detection and Response (XDR) solutions are best for your needs.

See recommendations

872,778 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Educational Organization

10%

Financial Services Firm

Comms Service Provider

Insurance Company

Computer Software Company

15%

Comms Service Provider

10%

University

Manufacturing Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	5
Midsize Enterprise	1
Large Enterprise	4

By reviewers
Company Size	Count
Small Business	26
Midsize Enterprise	15
Large Enterprise	8

Questions from the Community

What do you like most about Lumu?

Lumu protects against threats immediately and handles them in time.

See all answers

What needs improvement with Lumu?

There is always room for improvement. I am not giving it a perfect score because I am sure there is something that could be enhanced.Having some sort of certification or training, along with more p...

See all answers

What is your primary use case for Lumu?

We use it as our managed SOC instead of contracting with an MSP. It coordinates endpoint and gives us a single pane of glass for our security events.It fulfills the role of a SIEM, serving as our d...

See all answers

What do you like most about Wazuh?

Wazuh is its flexibility and open-source nature, which allows us to tailor threat detection and response across diverse client environments. Its integration capabilities with SOAR, cloud platforms,...

See all answers

What needs improvement with Wazuh?

The lack of AI features is an issue at the moment in the industry. Forti provides user behavior capabilities, which I would want to see in Wazuh. In FortiSIEM, they provide user behavior understand...

See all answers

What is your primary use case for Wazuh?

At the moment, I'm working in software integration, so we are working with FortiGate. To research and get an idea, I did some investigation into Wazuh. They have already used Fortinet products. The...

See all answers

Comparisons

Darktrace vs Lumu

Compared 46% of the time

Stellar Cyber Open XDR vs Lumu

Compared 13% of the time

Vectra AI vs Lumu

Compared 8% of the time

Microsoft Defender XDR vs Lumu

Compared 8% of the time

Corelight Open NDR vs Lumu

Compared 5% of the time

More Lumu Competitors

Security Onion vs Wazuh

Compared 13% of the time

Elastic Stack vs Wazuh

Compared 11% of the time

Graylog Enterprise vs Wazuh

Compared 7% of the time

AlienVault OSSIM vs Wazuh

Compared 6% of the time

Elastic Security vs Wazuh

Compared 4% of the time

More Wazuh Competitors

Product Reports

Buyer's Guide

Lumu

October 2025

Download Lumu product report

Buyer's Guide

Wazuh

October 2025

Download Wazuh product report

Also Known As

No data available

Wazuh All-In-One Deployment

Overview

Lumu Technologies is a cyber-security company that illuminates threats, attacks, and adversaries affecting enterprises worldwide. Using actionable intelligence, Lumu provides a radical way to secure networks by enhancing and augmenting existing defense capabilities established over the past 25 years.

Lumu Technologies

Wazuh offers comprehensive security features like MITRE ATT&CK correlation, log monitoring, and cloud-native infrastructure. It ensures compliance and provides intrusion detection with high scalability and open-source flexibility, ideal for businesses seeking robust SIEM capabilities.

Wazuh stands out in security information and event management by providing efficient log aggregation, vulnerability scanning, and event correlation against MITRE ATT&CK. Its capability to integrate seamlessly with environments, manage compliance, and monitor files makes it suitable for cloud-native infrastructures and financial sectors. Despite its technical support needing enhancement and opportunities for improving AI integration and threat intelligence, its open-source nature and cost-effectiveness make it appealing. Users can leverage custom dashboards powered by Elasticsearch for precise data analysis, even though there is a desire for a more user-friendly interface and better enterprise solution integration. Deployment may be complex, but its features contribute significantly to fortified security postures.

What are the essential features of Wazuh?

MITRE ATT&CK Correlation: Aligns events with recognized adversary tactics and techniques.
Log Monitoring: Collects and analyzes logs for threat detection.
Cloud-Native Infrastructure: Supports modern cloud environments.
Vulnerability Scanning: Identifies potential security weaknesses.
File Integrity Monitoring: Ensures the integrity of sensitive files.
Open-Source Flexibility: Customizable and adaptable code base.

What benefits should users consider?

Cost-Effectiveness: Offers a budget-friendly security solution.
Ease of Use: Simplified setup and management.
Comprehensive Compliance Management: Aids in meeting regulatory requirements.
High Scalability: Grows with businesses and adapts to different environments.
Extensive Third-Party Integrations: Connects to various existing systems.

Industries like finance and cloud infrastructure heavily utilize Wazuh for its security strengths. By monitoring endpoints and ensuring compliance with frameworks, companies can improve security posture and swiftly detect anomalies. The platform's focus on event correlation and alerts for security incidents is particularly beneficial.

Free Report: Lumu vs. Wazuh

Find out what your peers are saying about Lumu vs. Wazuh and other solutions. Updated: September 2025.

DOWNLOAD NOW

872,778 professionals have used our research since 2012.

See our Lumu vs. Wazuh report.

See our list of best Extended Detection and Response (XDR) vendors.

We monitor all Extended Detection and Response (XDR) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.