Wazuh is a free, open source and enterprise-ready security monitoring solution for threat detection, integrity monitoring, incident response, and regulatory compliance. The solution includes the Wazuh manager, which is in charge of analyzing the data received from the agents, processing events through decoders and rules, and using threat intelligence to look for well-known IOCs (Indicators Of Compromise). A single Wazuh manager can analyze data from hundreds or thousands of agents. Alerts generated by Wazuh are sent to Wazuh indexer, where they are indexed and stored. The unique integration between Wazuh and Wazuh dashboard provides a powerful user interface for data visualization and analysis. The manager is also used to manage the agents, configuring and upgrading them remotely when necessary. Additionally, the manager is capable of sending orders to the agents, for example, to trigger a response when a threat is detected. Wazuh provides a security solution capable of monitoring your infrastructure, detecting threats, intrusion attempts, system anomalies, poorly configured applications, and unauthorized user actions. It also provides a framework for incident response and compliance, all in one platform.
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
This is a free software listing, so you pay no license fee for Wazuh itself. Instead, you choose an ARM64 (AARCH64) EC2 instance type, and each option is billed by the hour based on the AWS infrastructure it runs on. The many choices span general-purpose, compute-optimized, memory-optimized, storage-optimized, and metal instance families in varying sizes. Larger sizes carry more CPU, memory, or storage for bigger deployments. Your hourly cost scales with the instance you pick. All options run the same all-in-one deployment, combining the Wazuh server, indexer, and dashboard on a single host.
Top-of-mind questions for buyers
What do I actually get for the hourly charge, since Wazuh software is free?
The hourly rate covers the ARM64 EC2 instance running your deployment, not the Wazuh software. You choose one instance type, and its size sets the CPU, memory, and storage available. Larger sizes suit more monitored endpoints and longer alert retention. The Wazuh server, indexer, and dashboard run together on that single host.
Am I charged when the instance is stopped or powered off?
Hourly software charges accrue only while the instance runs. A fully stopped instance stops the hourly meter. Note that stopped instances may still incur underlying AWS storage fees for attached volumes, which are separate from this listing's hourly rate.
How do I choose an instance size for my number of monitored endpoints?
Hardware needs scale with the number of protected endpoints and how much alert data you store and index. A single all-in-one host commonly handles up to 100 endpoints with about 90 days of queryable data. Pick a smaller instance for light monitoring and a larger one for bigger deployments.
documentation.wazuh.com+1
Helpful?
Vendor refund policy
We do not currently support refunds.
How can we make this page better?
Tell us how we can improve this page, or report an issue with this product.
Give us feedbackReport a problem with this product or seller
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA).
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
To access the instance by ssh, you will need to use the user: wazuh-user
When the instance is launched, the user passwords are automatically changed to the instance ID with the first letter capitalized. For example: I-07f25f6afe4789342. This ensures that only the creator has access to the interface. This process can take an average of five minutes, depending on the type of instance. During this time, both SSH access and access to the Wazuh dashboard are disabled.
Wazuh has one of the largest open source security communities in the world. You can become part of it to learn from other users, participate in discussions, talk to our development team, and contribute to the project.
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
This is a repackaged software product wherein additional charges apply for a pre-hardened, SI Core STIG Hardened image and seller support. The Amazon Linux 2023 AMI ARM64 provides a robust, secure, and optimized environment for developing and deploying applications in the AWS cloud. With the latest updates, Amazon Linux 2023 AMI ARM64 ensures compatibility with a wide range of AWS services while offering enhanced performance tailored for ARM architecture. Ideal for startups and enterprise applications alike, Amazon Linux 2023 AMI ARM64 simplifies operations, enabling faster provisioning of instances. Leverage the security features and access to AWS tools with Amazon Linux 2023 AMI ARM64 to streamline your cloud deployment strategy.
Be the first to review this product. We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.