Wazuh
Open-source SIEM and XDR with compliance reporting built in.
88
sovereigntyAgent-based security monitoring with file integrity checks, vulnerability detection, log analysis and prebuilt compliance reporting for PCI DSS, HIPAA, NIST 800-53 and GDPR. Covers the continuous-monitoring requirement that auditors ask about, on infrastructure you run.
OPEN SOURCEGPL-2.0SELF-HOSTLOCAL-FIRST
LicenseGPL-2.0
PricingFree / self-host; paid Wazuh Cloud available
Open sourceYes
Self-hostableYes
Local-first dataYes
What it does well
- +Genuine SIEM capability, not just configuration scanning
- +Compliance report templates map findings to named framework controls
- +Large deployed base and active development
Where it falls short
- −Real operational weight — agents, indexers and storage to run and tune
- −Overkill if you only need cloud posture and have no on-host estate
- −Again: monitoring and evidence, never the audit itself
Wazuh as an alternative to
Where Wazuh shows up in our comparisons, and how it ranked.
Wazuh head-to-head
Straight comparisons against the tools people weigh it against.