Try our new research platform with insights from 80,000+ expert users

OpenText Behavioral Signals vs Wazuh comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Jun 19, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
8.9
ArcSight Intelligence boosts security and ROI by automating threat detection, reducing false positives, and streamlining workflows with advanced analytics.
Sentiment score
5.6
Wazuh provides significant ROI with fast detection and response times, cost savings, and benefits for SMBs and MSPs.
I have seen value in security cost savings with Wazuh, as using proprietary EDR versions could save us substantial money.
 

Customer Service

Sentiment score
6.7
OpenText Behavioral Signals' support is responsive and skilled, but resolution may be slow and feedback sometimes lacks depth.
Sentiment score
6.0
Wazuh support receives mixed reviews; commercial support excels but free users face delays and time zone challenges.
They responded quickly, which was crucial as I was on a time constraint.
There is no dedicated technical support for Wazuh as it is open source.
The documentation is good and provides clear instructions, though it's targeted at those with technical backgrounds.
 

Scalability Issues

Sentiment score
6.3
OpenText Behavioral Signals faces scalability challenges, while technologies like ArcSight Intelligence excel, prompting consideration of alternatives like Splunk.
Sentiment score
7.5
Wazuh is scalable, ideal for SMBs and enterprises, but requires technical knowledge and resources for complex deployments.
Currently, I don't see any limitations in terms of scalability as Wazuh can still connect many endpoints.
It can accommodate thousands of endpoints on one instance, and multiple instances can run for different clients.
Scalability depends on the configuration and the infrastructure resources like compute and memory we allocate.
 

Stability Issues

Sentiment score
8.4
OpenText Behavioral Signals is praised for its stability, receiving high ratings and fostering user trust through reliable performance.
Sentiment score
6.6
Wazuh offers stable performance with proper maintenance, yet frequent updates and configuration challenges can cause occasional issues.
The indexer frequently times out, requiring system restarts.
The stability of Wazuh is strong, with no issues stemming from the solution itself.
The stability of Wazuh is largely dependent on maintenance.
 

Room For Improvement

OpenText and ArcSight require updates for usability, scalability, and pricing to compete with QRadar and Splunk effectively.
Wazuh needs enhancements in UI, scalability, and integration, with focus on AI, log analysis, and efficient user management.
I think Wazuh should improve by introducing AI functionalities, as it would be beneficial to see AI incorporated in the threat hunting and detection functionalities.
Wazuh could improve by creating videos on YouTube covering installation, use cases, and integration of third-party APIs for different scenarios that other SAAS services provide.
The integration modules are insufficiently developed, necessitating the creation of custom integration solutions using tools like Logstash and PubSub.
 

Setup Cost

OpenText Behavioral Signals offers enterprise-priced licensing options with additional charges for new features not in the base license.
Wazuh is a cost-effective, open-source security solution with optional support, but consider additional infrastructure and third-party service costs.
Wazuh is completely free of charge.
Totaling around two lakh Indian rupees per month.
Wazuh is free to use, but there are licensing fees for third parties.
 

Valuable Features

OpenText Behavioral Signals synthesizes diverse logs, customizes environments, and enhances efficiency with a user-friendly, consolidated interface.
Wazuh offers robust security features, easy integration, and scalability, excelling in compliance and intrusion detection across environments.
The system allows us to monitor endpoints effectively and collect security data that can be utilized across other platforms such as SOAR.
With this open source tool, organizations can establish their own customized setup.
Wazuh is a SIEM tool that is highly customizable and versatile.
 

Categories and Ranking

OpenText Behavioral Signals
Ranking in Security Information and Event Management (SIEM)
40th
Average Rating
8.0
Reviews Sentiment
6.6
Number of Reviews
5
Ranking in other categories
User Entity Behavior Analytics (UEBA) (15th)
Wazuh
Ranking in Security Information and Event Management (SIEM)
2nd
Average Rating
7.4
Reviews Sentiment
6.7
Number of Reviews
48
Ranking in other categories
Log Management (1st), Extended Detection and Response (XDR) (5th)
 

Mindshare comparison

As of July 2025, in the Security Information and Event Management (SIEM) category, the mindshare of OpenText Behavioral Signals is 0.3%, down from 0.3% compared to the previous year. The mindshare of Wazuh is 12.6%, down from 16.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Security Information and Event Management (SIEM)
 

Featured Reviews

Nagendra Nekkala - PeerSpot reviewer
A user-friendly solution that can be used to integrate the logs properly with different connectors
ArcSight Intelligence is easy to maintain; one person is enough for the solution's maintenance. The maintenance person will add new features or devices, make policy changes or configurations, and learn and guide other engineers about new threats. ArcSight Intelligence is a user-friendly solution, and users should buy it if their company can afford its cost. Overall, I rate ArcSight Intelligence a nine out of ten.
Sandip_Patel - PeerSpot reviewer
Evaluating robust file monitoring with insights for community support improvements
Wazuh's most valuable features include file monitoring and compliance reporting, which do not require excessive costs. These aspects are vital as they provide alerts for changes and facilitate the monitoring of compliance. The platform is also relatively easy to set up and operate. Reports are straightforward to extract and prove useful for compliance requirements.
report
Use our free recommendation engine to learn which Security Information and Event Management (SIEM) solutions are best for your needs.
860,592 professionals have used our research since 2012.
 

Comparison Review

it_user186927 - PeerSpot reviewer
Feb 16, 2015
Cybereason vs. Interset vs. SQRRL
Capture DB - they all use NoSQL db and hence solve the ad hoc query and 'go back in time' problem with current best of breed SIEM and DLP solutions that rely on real time analysis of incoming logs (and don't store them). This means deeper and quicker iterative threat analysis and assessment…
 

Top Industries

By visitors reading reviews
Government
18%
Computer Software Company
16%
Manufacturing Company
6%
University
6%
Computer Software Company
15%
Comms Service Provider
9%
University
7%
Government
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
 

Questions from the Community

What do you like most about ArcSight Interset / Intelligence?
The platform helps us improve threat detection capabilities.
What needs improvement with ArcSight Interset / Intelligence?
The product could be improved in several areas; it currently requires significant enhancement. Compared to QRadar and Splunk, ArcSight Intelligence falls behind, placing it as the third choice amon...
What do you like most about Wazuh?
Wazuh is its flexibility and open-source nature, which allows us to tailor threat detection and response across diverse client environments. Its integration capabilities with SOAR, cloud platforms,...
What needs improvement with Wazuh?
That would require me to discuss with the Wazuh team regarding areas that could be improved, as I have numerous ideas. From a developer's perspective, this is a Linux system with an active communit...
What is your primary use case for Wazuh?
Wazuh is a SIEM platform with various applications in today's environment. Compliance checks have helped with regulatory requirements. I pulled in PCI DSS to check for file integrity monitoring. I ...
 

Also Known As

ArcSight Interset / Intelligence, FileTrek, Interset UEBA, Micro Focus Interset UEBA, Micro Focus Interset, ArcSight Interset
No data available
 

Overview

 

Sample Customers

Accuvant, Splunk Inc., NuTech, Box, rSolutions, Voodoo Technology Limited
Information Not Available
Find out what your peers are saying about OpenText Behavioral Signals vs. Wazuh and other solutions. Updated: June 2025.
860,592 professionals have used our research since 2012.