2021-06-04T15:55:56Z
it_user434868 - PeerSpot reviewer
Senior Director of Delivery at a tech services company with 51-200 employees
  • 0
  • 164

What needs improvement with Wazuh?

Please share with the community what you think needs improvement with Wazuh.

What are its weaknesses? What would you like to see changed in a future version?

12
PeerSpot user
12 Answers
Vijay Muddu - PeerSpot reviewer
Server Administrator at Vivaconnect
Real User
Top 5
2022-10-28T12:40:06Z
Oct 28, 2022

The scalability of this solution could be improved.

Search for a product comparison
SHEERAZ AHMED - PeerSpot reviewer
Managing Director at SharpTel
Real User
Top 10
2022-09-28T13:24:16Z
Sep 28, 2022

The computing resources are consuming and do not make sense. It should be lighter in terms of memory, CPU, and computing. There is a direct need for improvisation for any user, and it should be lighter than the current version. In the next release, they should include secure mobile app integration.

CG
Principal Architect at Calsoft
Real User
Top 5
2022-09-10T14:06:19Z
Sep 10, 2022

Log data analysis could be improved. My IT team has been looking for an alternative because they want better log data for malware detection. We are also doing more container implementation also, so we need better container security, log data analysis, auditing and compliance, malware detection, etc. Overall, the implementation part of Azure is tricky. It can be simplified and automated more to shorten the deployment timeline, so we can immediately onboard the application. The entire implementation process should be user-friendly.

Maikel Richard Villar Rodriguez - PeerSpot reviewer
Cybersecurity supervisior at Optical Network
Real User
Top 20
2022-08-30T23:26:05Z
Aug 30, 2022

Wazuh needs more security features, particularly visualization features and a health monitor. In the next release, it should be easier to see the origin of events when connected to a firewall or switch. I would also like more integration with XDR and cloud-based formats like the GCO log testing system or Huawei.

Vikrant Puranik - PeerSpot reviewer
Manager Cloud Security Operations at TraceLink, Inc.
Real User
Top 10
2022-08-01T13:01:54Z
Aug 1, 2022

Scalability is a constraint in the on-prem version of Wazuh in terms of the volume of logs we can manage. There are some minor glitches, but that's part of every tool, and they usually get addressed in subsequent updates. I would like to see more Kubernetes security and log integrations. That will be one of the good things. Wazuh supports AWS or GCP cloud-native service integration, but it would be great if they added support for Kubernetes security and AWS or Azure-managed Kubernetes solutions.

Dr. Sushan Banerjee - PeerSpot reviewer
GISO - Global Information Security Officer at Beyon Connect
Real User
Top 5
2022-07-10T15:39:18Z
Jul 10, 2022

It would be better if they had a vulnerability assessment plug-in like the one AlienVault has. In the next release, I would like to have an app with an alerting mechanism.

Learn what your peers think about Wazuh. Get advice and tips from experienced pros sharing their opinions. Updated: November 2022.
656,862 professionals have used our research since 2012.
Wajih Ul Hasan - PeerSpot reviewer
Cyber Security Engineer at Digit Labs
Real User
Top 10
2022-05-11T16:04:00Z
May 11, 2022

Wazuh has a drawback with regard to Unix systems. The solution does not allow us to do real-time monitoring for Unix systems. If usage increases, it would be a heavy fall on the other SIEM solutions or event monitoring solutions. We found a workaround by reducing the frequency, so it would give us some sort of real-time monitoring.

GS
Vice President Information Technology and Security at a comms service provider with 201-500 employees
Real User
Top 20
2022-04-08T20:34:00Z
Apr 8, 2022

There's not much I like about Wazuh. Other products I've used were a lot more functional and user friendly. They came with reports and use cases out of the box. We need to configure Wazuh's alerts and monitoring capabilities manually. It'd be nice if we could select from templates and presets for use cases already built and coded.

RS
Tech Lead Security at a comms service provider with 51-200 employees
Real User
Top 5Leaderboard
2022-03-16T20:33:57Z
Mar 16, 2022

Wazuh could improve the detection, it is not detecting all of the attacks. Additionally, it is lacking features compared to other solutions.

JK
CBO at a security firm with 11-50 employees
Reseller
Top 5
2022-02-17T11:03:00Z
Feb 17, 2022

I think that the next release should be more suitable for large enterprises, because currently they are not because large companies do not rely on open source solutions.

Robert Cheruiyot - PeerSpot reviewer
IT Security Consultant at Microlan Kenya Limited
Real User
Top 5Leaderboard
2021-10-28T15:16:16Z
Oct 28, 2021

Wazuh doesn't cover sources of events as well as Splunk. You can integrate Splunk with many sources of events, but it's a painful process to take care of some sources of events with Wazuh. It's hard to really go into what Wazuh should add. If we call for Wazuh to improve one thing, then many things have to be improved. So if Wazuh's primary purpose is to cover the logs, then we can't really keep asking them to cover endpoints as well. And Wazuh doesn't have threat intelligence, to my knowledge. It can integrate with other sources of threat intel, but I haven't seen a native threat intel platform. Many people subscribe to Splunk for this platform. You can integrate threat intelligence from other solutions, but I haven't seen this feature in Wazuh.

SP
Chief Information Security Officer at a financial services firm with 501-1,000 employees
Real User
2021-06-04T15:55:56Z
Jun 4, 2021

Its user interface for sure can be improved. It is not so comfortable to use if you're looking for specific logs.

Related Questions
it_user434868 - PeerSpot reviewer
Senior Director of Delivery at a tech services company with 51-200 employees
Nov 7, 2022
Hi, We all know it's really hard to get good pricing and cost information. Please share what you can so you can help your peers.
2 out of 10 answers
Robert Cheruiyot - PeerSpot reviewer
IT Security Consultant at Microlan Kenya Limited
Oct 28, 2021
Wazuh is open-source, so I think it's an option for a small organization that cannot go for enterprise-grade solutions like Splunk.
JK
CBO at a security firm with 11-50 employees
Feb 17, 2022
This is a very price sensitive product.
it_user434868 - PeerSpot reviewer
Senior Director of Delivery at a tech services company with 51-200 employees
Oct 28, 2022
Hi Everyone, What do you like most about Wazuh? Thanks for sharing your thoughts with the community!
2 out of 12 answers
SP
Chief Information Security Officer at a financial services firm with 501-1,000 employees
Jun 4, 2021
The MITRE ATT&CK correlation is most valuable.
Robert Cheruiyot - PeerSpot reviewer
IT Security Consultant at Microlan Kenya Limited
Oct 28, 2021
It's very easy to integrate Wazuh with other environments, cloud applications, and on-prem applications. So, the advantage is that it's easy to implement and integrate with other solutions.
Explore this product
Download Free Report
Download our free Wazuh Report and get advice and tips from experienced pros sharing their opinions. Updated: November 2022.
DOWNLOAD NOW
656,862 professionals have used our research since 2012.