AgentIndex icon
AgentIndex
Wazuh-MCP-Server logo
Wazuh-MCP-Server
★ 257
vs
mcp-panther logo
mcp-panther
★ 47

Wazuh-MCP-Server vs mcp-panther

Wazuh-MCP-Server: This production-ready MCP server bridges AI assistants with Wazuh SIEM, enabling natural language queries for security data. It simplifies threat analysis, vulnerability checks, and compliance reporting by eliminating context-switching and manual API interactions.; mcp-panther: The Panther MCP server enhances security operations by enabling interactive natural language querying of security logs, facilitating the writing and tuning of detections from an IDE, and streamlining the triage and resolution of alerts. It integrates with various AI clients like Cursor and Claude Code, providing a powerful toolkit for security professionals to manage and respond to threats efficiently.

01

TL;DR

Wazuh-MCP-Server logo
Wazuh-MCP-ServerObservability · ★ 257

Natural language querying for security alerts and data.

Read Wazuh-MCP-Server full review →
mcp-panther logo
mcp-pantherObservability · ★ 47

Automated Security Monitoring and Response

Read mcp-panther full review →
02

Side-by-Side Comparison

Field
Wazuh-MCP-Server logoWazuh-MCP-Server
mcp-panther logomcp-panther
Category
Observability
Observability
Stars
★ 257
★ 47
License
MIT
Apache-2.0
Install Command
git clone https://github.com/gensecaihq/Wazuh-MCP-Server.git && cd Wazuh-MCP-Server && cp .env.example .env && python deploy.py
docker run -i -e PANTHER_INSTANCE_URL="https://YOUR-PANTHER-INSTANCE.domain" -e PANTHER_API_TOKEN="YOUR-API-KEY" --rm ghcr.io/panther-labs/mcp-panther
Updated
1w ago
3d ago
Open Source
Yes
Yes
Website
↗ Visit
↗ Visit
GitHub
↗ GitHub
↗ GitHub
Tags
AI Integration, SIEM, Wazuh
Security Operations, SIEM, AI Assistant
03

Features

Wazuh-MCP-Server logoWazuh-MCP-Server
01Full MCP Protocol Compliance (2025-11-25)
0229 Specialized Security Tools
03Flexible Authentication (OAuth, JWT, Authless)
04Production-Ready Resilience and Monitoring
05Dockerized Multi-platform Deployment
mcp-panther logomcp-panther
01Write and tune detections from your IDE
02Interactively query security logs using natural language
03Triage, comment, and resolve alerts
04Extensive Toolset for Security Operations
05AI-powered Alert Triage
04

Use Cases

Wazuh-MCP-Server logoWazuh-MCP-Server
↳Natural language querying for security alerts and data.
↳Automated vulnerability and agent health checks.
↳Automatic alert triage and incident case creation.
↳AI-driven response planning and risk assessment.
mcp-panther logomcp-panther
↳Automated Security Monitoring and Response
↳Interactive Threat Hunting
↳Streamlined Alert Management for SOCs
↳DevSecOps Integration for Security-as-Code
↳Continuous Security Posture Assessment
FAQ

FAQ

What is the difference between Wazuh-MCP-Server and mcp-panther?
Both Wazuh-MCP-Server and mcp-panther are in the Observability category. Wazuh-MCP-Server has 257 stars, while mcp-panther has 47 stars.
Which is better, Wazuh-MCP-Server or mcp-panther?
The best choice depends on your use case. Choose Wazuh-MCP-Server if Natural language querying for security alerts and data., and mcp-panther if Automated Security Monitoring and Response.
Is Wazuh-MCP-Server free or open source?
Yes, Wazuh-MCP-Server is open source on GitHub (MIT).
Is mcp-panther free or open source?
Yes, mcp-panther is open source on GitHub (Apache-2.0).
Cloud Infrastructure
Ad

Deploy on DigitalOcean

Host your MCP servers, Docker containers, and AI agents with $200 free credit over 60 days.

Claim $200 Free Credit
→

Related

Alternatives to Wazuh-MCP-Server →Alternatives to mcp-panther →Wazuh-MCP-Server details →mcp-panther details →