Wazuh

Wazuh is an open-source HIDS and security monitoring platform that combines log analysis, file integrity monitoring, intrusion detection, and vulnerability detection. It includes a central manager, agents for multiple OSes, and a web-based dashboard for incident investigation and compliance reporting. Wazuh integrates with Elastic Stack and other SIEMs to provide searchable logs, alerts, and visualizations across many endpoints. Organizations use Wazuh for continuous monitoring, threat detection, and meeting regulatory requirements. The platform supports custom rules, decoders, and active response capabilities to mitigate threats.