Lumu vs Wazuh comparison

Lumu Technologies and Wazuh are both solutions in the Extended Detection and Response (XDR) category. Lumu Technologies is ranked #17 with an average rating of 9.0, while Wazuh is ranked #5 with an average rating of 7.7. Lumu Technologies holds a 1.5% mindshare in XDR, compared to Wazuh’s 10.7% mindshare. Additionally, 100% of Lumu Technologies users are willing to recommend the solution, compared to 80% of Wazuh users who would recommend it.

Lumu

Read 8 Lumu reviews

1,531 Views
1,026 Comparison Views

100% willing to recommend

Wazuh

Read 49 Wazuh reviews

43,564 Views
12,198 Comparison Views

80% willing to recommend

Lumu

Wazuh

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Aug 25, 2025

Wazuh and Lumu compete in the cybersecurity solutions category. Wazuh appears to have the upper hand in threat detection and response, while Lumu shines in continuous compromise assessment due to its strategic intelligence capabilities.

Features: Wazuh features comprehensive threat detection, log analysis, and security monitoring, establishing itself as a robust open-source platform. Lumu excels in detecting network compromises, empowering organizations to manage threats proactively through continuous traffic analysis. Both solutions address unique aspects of security management, offering valuable tools to meet diverse needs.

Room for Improvement: Wazuh could enhance its user interface and provide more advanced analytics to cater to diverse client requirements. Improving documentation and increasing the range of vendor support options would also be advantageous. For Lumu, expanding compatibility with more cybersecurity tools and providing advanced reporting capabilities could elevate its effectiveness. Simplifying setup processes and offering more detailed customization options might further bolster its utility.

Ease of Deployment and Customer Service: Wazuh's deployment benefits from its open-source nature, suitable for users with in-house expertise, though vendor support is limited. It offers a flexible, self-directed deployment experience. Lumu focuses on streamlined integration and proactive customer engagement, ensuring ease of deployment with active support throughout the process, which enhances user experience.

Pricing and ROI: Wazuh's open-source offering allows for low setup costs, appealing to security-conscious organizations with necessary technical resources. In contrast, Lumu operates on a subscription model, perceived as costlier but offering rapid ROI due to swift compromise detection and focused intelligence services. Both solutions cater to different budgetary preferences, providing unique benefits aligned with their respective approaches.

To learn more, read our detailed Lumu vs. Wazuh Report (Updated: July 2025).

Buyer's Guide

Lumu vs. Wazuh

July 2025

Download the complete report

Helped 867,370 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Lumu

Ranking in Extended Detection and Response (XDR)

17th

Average Rating

9.2

Reviews Sentiment

7.7

Number of Reviews

Ranking in other categories

Intrusion Detection and Prevention Software (IDPS) (13th), Network Detection and Response (NDR) (6th)

Wazuh

Ranking in Extended Detection and Response (XDR)

5th

Average Rating

7.4

Reviews Sentiment

6.7

Number of Reviews

Ranking in other categories

Log Management (1st), Security Information and Event Management (SIEM) (2nd)

Mindshare comparison

As of September 2025, in the Extended Detection and Response (XDR) category, the mindshare of Lumu is 1.5%, up from 0.4% compared to the previous year. The mindshare of Wazuh is 10.7%, down from 12.4% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Extended Detection and Response (XDR) Market Share Distribution
Product	Market Share (%)
Wazuh	10.7%
Lumu	1.5%
Other	87.8%

Extended Detection and Response (XDR)

Featured Reviews

Juan Solano

IT Director at Atlantic Quantum Innovations

Protects against threats and handles it in time with moderate pricing

Mostly, Lumu is an automatic tool. We'll deploy on firewalls and DNS servers. Lumu detects every attack on our network. The other day, we had CLC, the command controller, and the tool reacted automatically. It detected the attack and immediately blocked it without intervention from my team. The improvement is in the security process, as it's now entirely automated. We no longer require a technician or engineer to monitor our network 24/7. Lumu updates with AI and global threat intelligence, which greatly assists us. Since our workload is lighter, Lumu handles all of our tasks. We're using FortiGate for the firewall and Kaspersky for endpoints. If you are going to Lumu, you need another solution for the endpoint. You need to integrate with other tools like firewalls or another antivirus. I recommend the solution based on the price, usability, and service offered by the solution. Overall, I rate the solution a nine out of ten.

Read full review

Sandip_Patel

Student at Dakota State University

Evaluating robust file monitoring with insights for community support improvements

Wazuh's most valuable features include file monitoring and compliance reporting, which do not require excessive costs. These aspects are vital as they provide alerts for changes and facilitate the monitoring of compliance. The platform is also relatively easy to set up and operate. Reports are straightforward to extract and prove useful for compliance requirements.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"It's been helpful for overall extended network visibility."

"The automated response to incidents works effectively out of the box, and the number of interfaces and platforms it can work with is impressive."

"The context provided by the tool is very complete, it includes the miter matrix, playbooks, links, hashes, and much more."

"The tool's support team helps partners resolve any problems with the product."

"You can access external links, playbooks, MITRE Matrix, and a lot of information."

"Lumu protects against threats immediately and handles them in time."

"Most of it is automated, so I do not have to watch it to get alerts."

"I like Lumu's simple user interface. When we deployed it, we got full access, allowing us to identify IP addresses on the network and connect machine names to users. It helped us identify and block threats via the firewall. I also appreciate the chat support and ticket closure process. We're currently reviewing network detection solutions, and my recommendations include Lumu, Sentinel, and a few others. Regarding functionality and user-friendliness, I would recommend Lumu over the others."

"The solution is easy to maintain."

"The most valuable features are the modules and metrics."

"The deployment is easy and they provide very good documentation."

"Wazuh offers an enhanced HDR version that outperforms its competitors."

"I like the features we use, including malware detection, inventory, detection of hidden processes, and activity logs. Inventory is probably the most important feature. It tells us when processes and packages were installed and what they are, which is helpful."

"The most valuable feature of Wazuh is the ELK for doing an investigation."

"One of the most beneficial features of Wazuh, particularly in the context of security needs, is the machine learning data handling capability."

"It offers built-in modules for file integrity and vulnerability management."

More Wazuh pros

Cons

"The reports need improvement."

"Lumu's ability to discover threats is an area of concern where improvements are needed."

"Having a larger support network would be beneficial. Nobody I know has heard of Lumu, so they are in the same space as Darktrace or CrowdStrike, but people give blank stares."

"Nothing so far needs to be improved."

"It would be good if we could access the physical logs."

"I am happy with the current features. However, one important one is to improve the reports."

"The free version is minimal compared to the full version."

"The integration with different vendors and endpoints could be improved."

"Wazuh has a drawback with regard to Unix systems. The solution does not allow us to do real-time monitoring for Unix systems. If usage increases, it would be a heavy fall on the other SIEM solutions or event monitoring solutions."

"The tool doesn't detect anomalies or new environments."

"Some features, like alerting, are complex with Wazuh."

"Wazuh currently fails to provide its users with AI and ML."

"A more structured approach, perhaps with modular UI components, to facilitate easier integration and navigation within the Wazuh platform for custom integrations would be beneficial."

"The computing resources are consuming and do not make sense."

"The biggest part that's missing is threat intelligence. It isn't inbuilt, and if a sudden incident occurs, we don't get that feedback inside the SIEM tool. That's a big gap, I see. It would be better if we could get the threat intelligence feeds integrated with the SIEM tools. That would help us push value solutions to the clients in a big way."

"Wazuh is missing many things that a typical SIEM should have."

More Wazuh cons

Pricing and Cost Advice

"The tool is available at a good price. The tool offers a good and competitive price for customers."

"Compared to Lumu, other solutions are more expensive. SentinelOne was a bit cheaper, and another provider's price structure is unclear, but Lumu fit our budget nicely. SentinelOne's cost depends on the number of devices, and it might be similar to Lumu's, depending on deployment."

"It is the cheapest solution we found."

"Wazuh is totally free and open source. There are no licensing costs, only support costs if you need them."

"They have a good pricing strategy for market expansion."

"Wazuh has a community edition, and I was using that. It's free and open source."

"The solution's cost is above the average."

"Wazuh is an open-source tool."

"It is an open-source product."

"There is not a license required for Wazuh."

"It is a cost-effective solution."

More Wazuh pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Extended Detection and Response (XDR) solutions are best for your needs.

See recommendations

867,370 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

10%

Educational Organization

10%

Comms Service Provider

Insurance Company

Computer Software Company

15%

Comms Service Provider

University

Manufacturing Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	5
Midsize Enterprise	1
Large Enterprise	4

By reviewers
Company Size	Count
Small Business	26
Midsize Enterprise	15
Large Enterprise	8

Questions from the Community

What do you like most about Lumu?

Lumu protects against threats immediately and handles them in time.

See all answers

What needs improvement with Lumu?

There is always room for improvement. I am not giving it a perfect score because I am sure there is something that could be enhanced.Having some sort of certification or training, along with more p...

See all answers

What is your primary use case for Lumu?

We use it as our managed SOC instead of contracting with an MSP. It coordinates endpoint and gives us a single pane of glass for our security events.It fulfills the role of a SIEM, serving as our d...

See all answers

What do you like most about Wazuh?

Wazuh is its flexibility and open-source nature, which allows us to tailor threat detection and response across diverse client environments. Its integration capabilities with SOAR, cloud platforms,...

See all answers

What needs improvement with Wazuh?

That would require me to discuss with the Wazuh team regarding areas that could be improved, as I have numerous ideas. From a developer's perspective, this is a Linux system with an active communit...

See all answers

What is your primary use case for Wazuh?

Wazuh is a SIEM platform with various applications in today's environment. Compliance checks have helped with regulatory requirements. I pulled in PCI DSS to check for file integrity monitoring. I ...

See all answers

Comparisons

Darktrace vs Lumu

Compared 49% of the time

Stellar Cyber Open XDR vs Lumu

Compared 12% of the time

Vectra AI vs Lumu

Compared 7% of the time

Microsoft Defender XDR vs Lumu

Compared 7% of the time

Corelight Open NDR vs Lumu

Compared 5% of the time

More Lumu Competitors

Security Onion vs Wazuh

Compared 13% of the time

Elastic Stack vs Wazuh

Compared 12% of the time

Graylog Enterprise vs Wazuh

Compared 8% of the time

AlienVault OSSIM vs Wazuh

Compared 6% of the time

Elastic Security vs Wazuh

Compared 4% of the time

More Wazuh Competitors

Product Reports

Buyer's Guide

Lumu

September 2025

Download Lumu product report

Buyer's Guide

Wazuh

August 2025

Download Wazuh product report

Also Known As

No data available

Wazuh All-In-One Deployment

Overview

Lumu Technologies is a cyber-security company that illuminates threats, attacks, and adversaries affecting enterprises worldwide. Using actionable intelligence, Lumu provides a radical way to secure networks by enhancing and augmenting existing defense capabilities established over the past 25 years.

Lumu Technologies

Wazuh offers comprehensive security features like MITRE ATT&CK correlation, log monitoring, and cloud-native infrastructure. It ensures compliance and provides intrusion detection with high scalability and open-source flexibility, ideal for businesses seeking robust SIEM capabilities.

Wazuh stands out in security information and event management by providing efficient log aggregation, vulnerability scanning, and event correlation against MITRE ATT&CK. Its capability to integrate seamlessly with environments, manage compliance, and monitor files makes it suitable for cloud-native infrastructures and financial sectors. Despite its technical support needing enhancement and opportunities for improving AI integration and threat intelligence, its open-source nature and cost-effectiveness make it appealing. Users can leverage custom dashboards powered by Elasticsearch for precise data analysis, even though there is a desire for a more user-friendly interface and better enterprise solution integration. Deployment may be complex, but its features contribute significantly to fortified security postures.

What are the essential features of Wazuh?

MITRE ATT&CK Correlation: Aligns events with recognized adversary tactics and techniques.
Log Monitoring: Collects and analyzes logs for threat detection.
Cloud-Native Infrastructure: Supports modern cloud environments.
Vulnerability Scanning: Identifies potential security weaknesses.
File Integrity Monitoring: Ensures the integrity of sensitive files.
Open-Source Flexibility: Customizable and adaptable code base.

What benefits should users consider?

Cost-Effectiveness: Offers a budget-friendly security solution.
Ease of Use: Simplified setup and management.
Comprehensive Compliance Management: Aids in meeting regulatory requirements.
High Scalability: Grows with businesses and adapts to different environments.
Extensive Third-Party Integrations: Connects to various existing systems.

Industries like finance and cloud infrastructure heavily utilize Wazuh for its security strengths. By monitoring endpoints and ensuring compliance with frameworks, companies can improve security posture and swiftly detect anomalies. The platform's focus on event correlation and alerts for security incidents is particularly beneficial.

Free Report: Lumu vs. Wazuh

Find out what your peers are saying about Lumu vs. Wazuh and other solutions. Updated: July 2025.

DOWNLOAD NOW

867,370 professionals have used our research since 2012.

See our Lumu vs. Wazuh report.

See our list of best Extended Detection and Response (XDR) vendors.

We monitor all Extended Detection and Response (XDR) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.