Wazuh review
Free open-source SIEM and XDR you host yourself.
Top 11 rank
#11 of 11
Score
7.4/9.4
Pricing
$ (free open-source core, paid cloud and support options)
HQ
Campbell, USA
Verdict
Wazuh ranks eleventh as the wildcard because it delivers log analysis, threat detection, file integrity monitoring, and compliance modules as free open-source software, so a technical team runs full SIEM and XDR with no per-GB license.
What customers praise
It bundles intrusion detection, vulnerability checks, and compliance reporting in one self-hosted stack with a large active community.
What customers criticise
It needs infrastructure and security skill to run at scale, and lacks the managed support, UEBA, and polish of commercial SIEM.
Best for
Technical teams that want free, self-hosted open-source SIEM and XDR with no ingest license.
At a glance
- Integrations: Elasticsearch, AWS, Docker, Microsoft 365, VirusTotal
- Compliance: Self-hosted (compliance depends on deployment)
- Regions served: North America, EMEA, APAC
- Typical onboarding: 7 days
- Free tier: yes
Red flags
Public risk signals as of July 2026: none. No material public risk signals as of 2026-07-10. See the full red-flag report.
Alternatives
See alternatives to Wazuh, or compare against the next-ranked entry: .
Source: Top 11 Top 11 SIEM Software, verified July 10, 2026 — no paid placement.