Wazuh-MCP-Server logo
Wazuh-MCP-Server
★ 93
vs
mcp-panther logo
mcp-panther
★ 47

Wazuh-MCP-Server vs mcp-panther

Wazuh-MCP-Server: Wazuh-MCP-Server is a defensive Security Operations Center (SOC) server exposing over 100 tools for security analysis. It integrates with Wazuh SIEM, various threat intelligence feeds, and provides advanced capabilities like MITRE-driven APT correlation and LangGraph investigation workflows.; mcp-panther: The Panther MCP server enhances security operations by enabling interactive natural language querying of security logs, facilitating the writing and tuning of detections from an IDE, and streamlining the triage and resolution of alerts. It integrates with various AI clients like Cursor and Claude Code, providing a powerful toolkit for security professionals to manage and respond to threats efficiently.

01

TL;DR

Wazuh-MCP-Server logo
Wazuh-MCP-ServerSecurity & Safety · ★ 93

Performing comprehensive cyber attack overviews and generating curated threat reports.

mcp-panther logo
mcp-pantherObservability · ★ 47

Automated Security Monitoring and Response

02

Side-by-Side Comparison

Field
Wazuh-MCP-Server logoWazuh-MCP-Server
mcp-panther logomcp-panther
Category
Security & Safety
Observability
Stars
★ 93
★ 47
License
BSD-3-Clause
Apache-2.0
Install Command
git clone <repo> && cd Wazuh-MCP-Server && sudo bash setup.sh
docker run -i -e PANTHER_INSTANCE_URL="https://YOUR-PANTHER-INSTANCE.domain" -e PANTHER_API_TOKEN="YOUR-API-KEY" --rm ghcr.io/panther-labs/mcp-panther
Updated
1w ago
3d ago
Open Source
Yes
Yes
Tags
Wazuh, SIEM, SOC
Security Operations, SIEM, AI Assistant
03

Features

Wazuh-MCP-Server logoWazuh-MCP-Server
01Comprehensive Wazuh SIEM integration for alert search and management.
02Advanced 3-Sum APT correlation engine for multi-IoC and volumetric attack detection.
03Unified threat intelligence aggregation from multiple providers.
04LangGraph-powered investigation workflows and attack graphing for incident analysis.
05Extensive host and domain forensics tools, including typosquatting and webshell detection.
mcp-panther logomcp-panther
01Write and tune detections from your IDE
02Interactively query security logs using natural language
03Triage, comment, and resolve alerts
04Extensive Toolset for Security Operations
05AI-powered Alert Triage
04

Use Cases

Wazuh-MCP-Server logoWazuh-MCP-Server
↳Performing comprehensive cyber attack overviews and generating curated threat reports.
↳Correlating APT attacks using MITRE-driven rules and volumetric analysis to identify threats.
↳Investigating suspicious activities and IPs with unified threat intelligence and LangGraph-powered workflows.
↳Conducting host and domain forensics, including vulnerability assessment and detection of malicious artifacts.
mcp-panther logomcp-panther
↳Automated Security Monitoring and Response
↳Interactive Threat Hunting
↳Streamlined Alert Management for SOCs
↳DevSecOps Integration for Security-as-Code
↳Continuous Security Posture Assessment
FAQ

FAQ

What is the difference between Wazuh-MCP-Server and mcp-panther?
Both Wazuh-MCP-Server and mcp-panther are in the Security & Safety category. Wazuh-MCP-Server has 93 stars, while mcp-panther has 47 stars.
Which is better, Wazuh-MCP-Server or mcp-panther?
The best choice depends on your use case. Choose Wazuh-MCP-Server if Performing comprehensive cyber attack overviews and generating curated threat reports., and mcp-panther if Automated Security Monitoring and Response.
Is Wazuh-MCP-Server free or open source?
Yes, Wazuh-MCP-Server is open source on GitHub (BSD-3-Clause).
Is mcp-panther free or open source?
Yes, mcp-panther is open source on GitHub (Apache-2.0).
Cloud Infrastructure
Ad

Deploy on DigitalOcean

Host your MCP servers, Docker containers, and AI agents with $200 free credit over 60 days.

Claim $200 Free Credit
→

Related