Try our new research platform with insights from 80,000+ expert users

Pros & Cons summary

Buyer's Guide

Get pricing advice, tips, use cases and valuable features from real users of this product.
Get the report

Prominent pros & cons

PROS

Wazuh's integration capabilities with other environments, cloud applications, and on-premises applications are highly valued, making it easy to implement and integrate with various solutions.
Wazuh is appreciated for its comprehensive features, such as ELK integration, PCI DSS compliance, and CIS benchmark monitoring, offering capabilities comparable to premium solutions in the market for free.
Wazuh's open-source nature and ability to define custom rules make it flexible and compatible with various security solutions, enhancing its utility for different use cases.
Wazuh is highly regarded for its file monitoring and compliance reporting capabilities, providing valuable insights without incurring excessive costs.
Wazuh's stability, scalability, and robust documentation make it easy to deploy and maintain, and its EDR capabilities make it a preferred choice for many users.

CONS

Wazuh's threat intelligence is lacking and not integrated with SIEM tools, creating a gap in value for clients.
Real-time monitoring for Unix systems is not supported by Wazuh, which could impact scalability and performance.
Wazuh requires improvements in log data analysis, container security, and malware detection to meet IT team needs.
Technical support for Wazuh needs enhancement, with quicker responses and a focus on regional compliance standards.
Wazuh's configuration process is complex and time-consuming, requiring significant maintenance and system restarts.
 

Wazuh Pros review quotes

MB
Dec 16, 2024
Wazuh offers numerous features, such as the ability to define custom rules for detecting malicious activities and remembering behaviors.
reviewer2301372 - PeerSpot reviewer
Feb 9, 2024
One of the most beneficial features of Wazuh, particularly in the context of security needs, is the machine learning data handling capability.
Vikrant Puranik - PeerSpot reviewer
Aug 1, 2022
Wazuh's logging features integrate seamlessly with AWS cloud-native services. There are also Wazuh agent configurations for different use cases, like vulnerability scanning, host-based intrusion detection, and file integrity monitoring.
Learn what your peers think about Wazuh. Get advice and tips from experienced pros sharing their opinions. Updated: May 2025.
856,873 professionals have used our research since 2012.
AKASH MAJUMDER - PeerSpot reviewer
Mar 20, 2023
Wazuh offers an enhanced HDR version that outperforms its competitors.
Wajih Ul Hasan - PeerSpot reviewer
May 11, 2022
I find the PCI DSS feature the most valuable, along with the feature that monitors the compliance of Windows and the CIS benchmarks on other devices like Unix or Linux systems.
NH
Jul 11, 2024
The solution is easy to maintain.
PrzemekAndula - PeerSpot reviewer
Feb 7, 2024
The product is easy to customize.
EO
Jun 3, 2025
Overall, I rate Wazuh a nine out of ten.
Robert Cheruiyot - PeerSpot reviewer
Oct 28, 2021
It's very easy to integrate Wazuh with other environments, cloud applications, and on-prem applications. So, the advantage is that it's easy to implement and integrate with other solutions.
MS
Jul 10, 2024
The product's initial setup phase was easy.
 

Wazuh Cons review quotes

MB
Dec 16, 2024
The only challenge we faced with Wazuh was the lack of direct support.
reviewer2301372 - PeerSpot reviewer
Feb 9, 2024
They could include flexibility and customization capabilities by modifying for customers based on partner agreements.
Vikrant Puranik - PeerSpot reviewer
Aug 1, 2022
Scalability is a constraint in the on-prem version of Wazuh in terms of the volume of logs we can manage.
Learn what your peers think about Wazuh. Get advice and tips from experienced pros sharing their opinions. Updated: May 2025.
856,873 professionals have used our research since 2012.
AKASH MAJUMDER - PeerSpot reviewer
Mar 20, 2023
While it is scalable, it can suffer from reduced latencies.
Wajih Ul Hasan - PeerSpot reviewer
May 11, 2022
Wazuh has a drawback with regard to Unix systems. The solution does not allow us to do real-time monitoring for Unix systems. If usage increases, it would be a heavy fall on the other SIEM solutions or event monitoring solutions.
NH
Jul 11, 2024
The product's configuration part and lack of AI capabilities are some of the major concerns associated with Wazuh.
PrzemekAndula - PeerSpot reviewer
Feb 7, 2024
The tool does not provide CTI to monitor darknet.
EO
Jun 3, 2025
When I face a challenge, I prefer not to spend too much time on it and may move to another solution that will give us the results.
Robert Cheruiyot - PeerSpot reviewer
Oct 28, 2021
Wazuh doesn't cover sources of events as well as Splunk. You can integrate Splunk with many sources of events, but it's a painful process to take care of some sources of events with Wazuh.
MS
Jul 10, 2024
Wazuh currently fails to provide its users with AI and ML.