AgentIndex icon
AgentIndex
Wazuh-MCP-Server logo
Wazuh-MCP-Server
★ 257
vs
Wazuh-MCP-Server logo
Wazuh-MCP-Server
★ 93

Wazuh-MCP-Server vs Wazuh-MCP-Server

Wazuh-MCP-Server: This production-ready MCP server bridges AI assistants with Wazuh SIEM, enabling natural language queries for security data. It simplifies threat analysis, vulnerability checks, and compliance reporting by eliminating context-switching and manual API interactions.; Wazuh-MCP-Server: Wazuh-MCP-Server is a defensive Security Operations Center (SOC) server exposing over 100 tools for security analysis. It integrates with Wazuh SIEM, various threat intelligence feeds, and provides advanced capabilities like MITRE-driven APT correlation and LangGraph investigation workflows.

01

TL;DR

Wazuh-MCP-Server logo
Wazuh-MCP-ServerObservability · ★ 257

Natural language querying for security alerts and data.

Read Wazuh-MCP-Server full review →
Wazuh-MCP-Server logo
Wazuh-MCP-ServerSecurity & Safety · ★ 93

Performing comprehensive cyber attack overviews and generating curated threat reports.

Read Wazuh-MCP-Server full review →
02

Side-by-Side Comparison

Field
Wazuh-MCP-Server logoWazuh-MCP-Server
Wazuh-MCP-Server logoWazuh-MCP-Server
Category
Observability
Security & Safety
Stars
★ 257
★ 93
License
MIT
BSD-3-Clause
Install Command
git clone https://github.com/gensecaihq/Wazuh-MCP-Server.git && cd Wazuh-MCP-Server && cp .env.example .env && python deploy.py
git clone <repo> && cd Wazuh-MCP-Server && sudo bash setup.sh
Updated
1w ago
1w ago
Open Source
Yes
Yes
Website
↗ Visit
↗ Visit
GitHub
↗ GitHub
↗ GitHub
Tags
AI Integration, SIEM, Wazuh
Wazuh, SIEM, SOC
03

Features

Wazuh-MCP-Server logoWazuh-MCP-Server
01Full MCP Protocol Compliance (2025-11-25)
0229 Specialized Security Tools
03Flexible Authentication (OAuth, JWT, Authless)
04Production-Ready Resilience and Monitoring
05Dockerized Multi-platform Deployment
Wazuh-MCP-Server logoWazuh-MCP-Server
01Comprehensive Wazuh SIEM integration for alert search and management.
02Advanced 3-Sum APT correlation engine for multi-IoC and volumetric attack detection.
03Unified threat intelligence aggregation from multiple providers.
04LangGraph-powered investigation workflows and attack graphing for incident analysis.
05Extensive host and domain forensics tools, including typosquatting and webshell detection.
04

Use Cases

Wazuh-MCP-Server logoWazuh-MCP-Server
↳Natural language querying for security alerts and data.
↳Automated vulnerability and agent health checks.
↳Automatic alert triage and incident case creation.
↳AI-driven response planning and risk assessment.
Wazuh-MCP-Server logoWazuh-MCP-Server
↳Performing comprehensive cyber attack overviews and generating curated threat reports.
↳Correlating APT attacks using MITRE-driven rules and volumetric analysis to identify threats.
↳Investigating suspicious activities and IPs with unified threat intelligence and LangGraph-powered workflows.
↳Conducting host and domain forensics, including vulnerability assessment and detection of malicious artifacts.
FAQ

FAQ

What is the difference between Wazuh-MCP-Server and Wazuh-MCP-Server?
Both Wazuh-MCP-Server and Wazuh-MCP-Server are in the Observability category. Wazuh-MCP-Server has 257 stars, while Wazuh-MCP-Server has 93 stars.
Which is better, Wazuh-MCP-Server or Wazuh-MCP-Server?
The best choice depends on your use case. Choose Wazuh-MCP-Server if Natural language querying for security alerts and data., and Wazuh-MCP-Server if Performing comprehensive cyber attack overviews and generating curated threat reports..
Is Wazuh-MCP-Server free or open source?
Yes, Wazuh-MCP-Server is open source on GitHub (MIT).
Is Wazuh-MCP-Server free or open source?
Yes, Wazuh-MCP-Server is open source on GitHub (BSD-3-Clause).
Cloud Infrastructure
Ad

Deploy on DigitalOcean

Host your MCP servers, Docker containers, and AI agents with $200 free credit over 60 days.

Claim $200 Free Credit
→

Related

Alternatives to Wazuh-MCP-Server →Alternatives to Wazuh-MCP-Server →Wazuh-MCP-Server details →Wazuh-MCP-Server details →