Wazuh-MCP-Server
★ 93
vs
ida-pro-mcp
★ 13.1k
Wazuh-MCP-Server vs ida-pro-mcp
Wazuh-MCP-Server: Wazuh-MCP-Server is a defensive Security Operations Center (SOC) server exposing over 100 tools for security analysis. It integrates with Wazuh SIEM, various threat intelligence feeds, and provides advanced capabilities like MITRE-driven APT correlation and LangGraph investigation workflows.; ida-pro-mcp: IDA Pro MCP is a straightforward Model Context Protocol (MCP) server that integrates IDA Pro with various MCP clients, enabling powerful LLM-assisted reverse engineering. It offers a comprehensive, type-safe API for accessing and modifying IDA Pro's internal state, streamlining automated analysis workflows.
01
TL;DR
Wazuh-MCP-ServerSecurity & Safety · ★ 93
Performing comprehensive cyber attack overviews and generating curated threat reports.
ida-pro-mcpSecurity & Safety · ★ 13.1k
When to choose:
- You use Hex-Rays IDA Pro for binary analysis and want to connect Claude or Cursor to IDA's disassembler, decompiler, and type system via MCP.
- You want to automate function renaming, pseudocode commentary, and vulnerability identification inside IDA Pro.
When to skip:
- You rely on the open-source NSA Ghidra decompiler; GhidraMCP is the dedicated bridge for Ghidra.
- You do not hold an active IDA Pro license.
02
Side-by-Side Comparison
Field
Wazuh-MCP-Serverida-pro-mcpCategory
Security & Safety
Security & Safety
Stars
★ 93
★ 13.1k
License
BSD-3-Clause
MIT
Install Command
git clone <repo> && cd Wazuh-MCP-Server && sudo bash setup.sh
pip uninstall ida-pro-mcp && pip install https://github.com/mrexodia/ida-pro-mcp/archive/refs/heads/main.zip && ida-pro-mcp --install
Updated
1w ago
3w ago
Open Source
Yes
Yes
Tags
Wazuh, SIEM, SOC
IDA Pro, Reverse Engineering, MCP
03
Features
Wazuh-MCP-Server01Comprehensive Wazuh SIEM integration for alert search and management.
02Advanced 3-Sum APT correlation engine for multi-IoC and volumetric attack detection.
03Unified threat intelligence aggregation from multiple providers.
04LangGraph-powered investigation workflows and attack graphing for incident analysis.
05Extensive host and domain forensics tools, including typosquatting and webshell detection.
ida-pro-mcp01Type-safe API with TypedDict schemas for better IDE support and LLM structured outputs
02Batch-first design where most operations accept both single items and lists
03Consistent error handling where all batch operations return structured error information
04Cursor-based pagination for search functions to manage large results
05Performance optimization with string caching to avoid repeated build_strlist calls
04
Use Cases
Wazuh-MCP-Server↳Performing comprehensive cyber attack overviews and generating curated threat reports.
↳Correlating APT attacks using MITRE-driven rules and volumetric analysis to identify threats.
↳Investigating suspicious activities and IPs with unified threat intelligence and LangGraph-powered workflows.
↳Conducting host and domain forensics, including vulnerability assessment and detection of malicious artifacts.
ida-pro-mcp↳LLM-assisted reverse engineering directly within IDA Pro
↳Automating binary analysis tasks and programmatic modification of IDA Pro's database
↳Integrating IDA Pro's rich context with various Model Context Protocol (MCP) clients
05
Best For
Wazuh-MCP-Server—
ida-pro-mcpMost PopularEssentialTrending
FAQ
FAQ
What is the difference between Wazuh-MCP-Server and ida-pro-mcp?
Both Wazuh-MCP-Server and ida-pro-mcp are in the Security & Safety category. Wazuh-MCP-Server has 93 stars, while ida-pro-mcp has 13.1k stars.
Which is better, Wazuh-MCP-Server or ida-pro-mcp?
The best choice depends on your use case. Choose Wazuh-MCP-Server if Performing comprehensive cyber attack overviews and generating curated threat reports., and ida-pro-mcp if LLM-assisted reverse engineering directly within IDA Pro.
Is Wazuh-MCP-Server free or open source?
Yes, Wazuh-MCP-Server is open source on GitHub (BSD-3-Clause).
Is ida-pro-mcp free or open source?
Yes, ida-pro-mcp is open source on GitHub (MIT).
Cloud Infrastructure
AdDeploy on DigitalOcean
Host your MCP servers, Docker containers, and AI agents with $200 free credit over 60 days.
→