wazuh
by wazuhWazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
Security event correlation engine for ELK stack
This is the project's own description from GitHub — we show it as-is rather than inventing details.
This project is listed under Defensive Security Monitoring in Cybersecurity & Privacy, a category made for privacy-conscious users, businesses and security learners.
Do I need coding knowledge? Coding Knowledge Recommended. (Estimate based on project type: A developer tool/library — setup usually follows the README with basic coding skills. Always confirm from the repo's README.)
The source code is released under the GPL-3.0 license. Open-source licenses like this usually allow free use, including commercial use — but always read the actual license file in the repository before relying on it. Note: the code being free does not mean hosted services, APIs or infrastructure around it are free.
Activity level: Active · Last code update: 19 Aug 2026 · Created: 04 Nov 2018 · Open issues: 35
Official links: Releases ↗ · Documentation (README) ↗
We never publish installation steps we have not verified — the README above is the source of truth.
⭐ 446 stars · 🍴 104 forks · 🐛 35 open issues · 💻 Language: Go · 📄 License: GPL-3.0 · Default branch: master
Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
Main Sigma Rule Repository
Free and open log management
Open-source AI Security Operations Center: alert fusion, LLM-agent triage, MITRE ATT&CK investigation, and a replayable decision ledger for every agent step. Self-hostable, runs…
Digital Forensics Guide. Learn all about Digital Forensics, Computer Forensics, Mobile device Forensics, Network Forensics, and Database Forensics.
Red Team's SIEM - tool for Red Teams used for tracking and alarming about Blue Team activities as well as better usability in long term operations.