Wazuh
Wazuh: Broad security monitoring with free self-hosting and paid Wazuh Cloud plans. Ranked #30 of 36 in Alert Management Software by our editors (6.3/10); pricing: Free plan · 14-day trial; best for security monitoring teams with open-source needs.
At a glance
- Editor score6.3 / 10
- PricingFree plan · 14-day trial
- Best forSecurity monitoring teams with open-source needs
- Free planYes
- Paid from$571/mo
- Alert deduplicationNo
- Founded2015 · Campbell, California, United States
- Facts checked19 Sep 2026
Where it wins
- Collects and analyzes security events, then generates rule-based alerts
- Combines vulnerability, malware, file integrity, and compliance monitoring
- Forwards alerts to syslog, email, databases, and external systems
Where it doesn't
- Wazuh Cloud starts at $571 per month
- Cloud retention and agent limits vary by plan
- No alert deduplication
Our verdict on Wazuh
Wazuh combines XDR and SIEM capabilities to monitor endpoints, cloud workloads, containers, and servers. It is aimed at security monitoring teams that want open-source software or a managed cloud option. The self-hosted software is free and open source; Wazuh Cloud has paid plans. Its remit extends beyond alerting to security event collection and analysis, vulnerability and malware detection, file integrity monitoring, configuration assessment, and compliance monitoring, making it a better fit for broader security operations than for teams seeking a standalone alert manager.
Alert generation uses rules and severity thresholds, with custom decoders and dynamic fields to add event context. Alerts can be forwarded to syslog, email, databases, and external systems. Listed integrations include MySQL, PostgreSQL, Slack, PagerDuty, VirusTotal, Shuffle, and Maltiverse. Dashboard-based visualization helps teams review indexed security data. This breadth suits teams that want collection, enrichment, and response within a security platform; teams whose central requirement is alert deduplication should look elsewhere, since deduplication is not a listed capability.
According to the vendor's pricing page, Wazuh Cloud's Small plan costs $571 per month for up to 100 active agents, with one month of indexed retention, three months of archive retention, and standard support. Medium costs $923 per month for up to 250 agents, three months indexed and one year archived retention, with standard support. Large costs $1,467 per month for up to 500 agents, the same retention as Medium, and standard support. These tiers make the paid service a substantial commitment for teams that only need general alert management. Choose Wazuh for open-source security monitoring or a wider XDR/SIEM workflow; consider an alternative if deduplication or lower-cost general alert handling is the priority.
Your product? Our editors can test Wazuh in depth and publish a review, labelled as paid · from $149/mo →
Wazuh pricing
All 3 Wazuh plans and prices →
Wazuh fact sheet
| Free plan | Yes |
|---|---|
| Paid from | $571/mo |
| Alert deduplication | No |
| Routing rules | Yes |
| Alert enrichment | Yes |
| Suppression rules | Yes |
| Included alert volume | Not verified |
| Alert retention | Not verified |
| Free trial | 14 days |
| Deployment | Cloud, Desktop, Self-hosted |
| Platforms | Web, Linux, Windows, macOS |
| Integrations | 9 integrations: syslog, email, MySQL, PostgreSQL, Slack, PagerDuty … |
| Pricing | Free plan · 14-day trial (source) |
| Website | wazuh.com |
| Facts checked | 19 Sep 2026 |
Wazuh integrations
Wazuh lists 9 integrations on its own site.
- syslog
- MySQL
- PostgreSQL
- Slack
- PagerDuty
- VirusTotal
- Shuffle
- Maltiverse
Alternatives to Wazuh
- TrueWatch Event ManagementA broad event-management toolkit for teams that need alert context, routing, and suppression.9.4
- ServiceNow Event ManagementA broad event-to-response workflow for organizations running ServiceNow ITOM.9.3
- Splunk IT Service IntelligenceCorrelates and enriches alerts to help teams investigate service-impacting events.9.2
Also Ranked In
Wazuh is ranked in 11 of our directories; the 6 strongest besides Alert Management Software.
Used Wazuh? Be the first to review it
The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used Wazuh for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.
Write a reviewTwo minutes · verified accounts only · read by an editor before it appears
Featured on iTechGuides
Wazuh is listed in our Alert Management Software directory. Add the badge to your site — it links back to this page.
<a href="https://www.itechguides.com/products/wazuh/"><img src="https://www.itechguides.com/best/badge/wazuh.svg" alt="Featured on iTechGuides" width="230" height="46"></a>
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update