UNIXDEV
Wazuh and security monitoring: articles and guides
Articles on Wazuh and security monitoring, explaining how Wazuh works as a SIEM/XDR and how it can be used alongside existing EDR or antivirus. For IT and security teams evaluating monitoring tools.
Articles on this topic (2)
What is Wazuh? Open source SIEM/XDR vs commercial SIEM, and which organisations it fits
English edition
Wazuh is an open source SIEM/XDR platform with no licence fee, but its real cost lies in hardware, log storage, people and rule tuning. Commercial SIEMs bill on data volume, resources or nodes instead. It fits organisations with a team or partner to run it.
Already have EDR or antivirus? Do you also need Wazuh? Roles compared and how to combine them
English edition
EDR detects and responds on endpoints, while Wazuh fits as the central log and SIEM layer that ingests EDR alerts and adds file, software, vulnerability and configuration checks. The two usually complement each other, and Wazuh should not replace EDR.