Wazuh

Wazuh is a free and open-source security platform that unifies Extended Detection and Response (XDR) and Security Information and Event Management (SIEM) capabilities to provide comprehensive threat detection, incident response, vulnerability management, and compliance monitoring across endpoints, cloud workloads, containers, and network devices. The platform deploys lightweight agents to collect security telemetry including log data, file integrity changes, and system configurations, while correlating events with MITRE ATT&CK framework mappings and threat intelligence feeds to detect malware, intrusions, misconfigurations, and policy violations with automated active response capabilities and compliance reporting aligned with PCI-DSS, HIPAA, GDPR, and SOC 2 standards throughout the security operations lifecycle.