Documentation
Pick a service to open its documentation site.
Cloud
The official Wazuh SaaS
The platform manual: installation, agent enrollment, rules and decoders, and every step of running the open source SIEM and XDR at scale.
CTI
Threat intelligence & IoC gathering
Advisories, vulnerability entries and threat context, published and searchable on the CTI portal itself.
Mobius
Agentic SOC
How Mobius triages and correlates your alerts, and how to connect a deployment, tune playbooks and approve automated response.
Umbra
Identity risk & dark web monitoring
Setting up identity risk and dark web monitoring: what Umbra watches, the exposure alerts it raises and what to do when something of yours surfaces.
Vesper
Agentic support
How to ask Vesper for help, what the assistant can fix on its own and how it draws on the knowledge of the whole Wazuh community.
Argus
Cloud security posture (CSPM)
Connecting your cloud accounts, the checks behind each scan and the compliance frameworks Argus reports against, from CIS to PCI DSS.
Lumen
AI Detection & Response (AIDR)
Policies for generative AI in your organization: detecting prompt injection, protecting sensitive data and choosing when to log, redact or block.
Pharos
Vulnerability & threat intelligence
Watching your fleet against the CTI corpus: subscriptions, the read-only sidecar and alerts on what actually affects you.