Documentation

Pick a service to open its documentation site.

The official Wazuh SaaS

Cloud

The platform manual: installation, agent enrollment, rules and decoders, and every step of running the open source SIEM and XDR at scale.

Open docsdocumentation.wazuh.com
Agentic SOC

Mobius

How Mobius triages and correlates your alerts, and how to connect a deployment, tune playbooks and approve automated response.

Open docsdocs.mobius.wazuh.com
AI Detection & Response (AIDR)

Lumen

Policies for generative AI in your organization: detecting prompt injection, protecting sensitive data and choosing when to log, redact or block.

Open docsdocs.lumen.wazuh.com
Identity risk & dark web monitoring

Umbra

Setting up identity risk and dark web monitoring: what Umbra watches, the exposure alerts it raises and what to do when something of yours surfaces.

Open docsdocs.umbra.wazuh.com
Cloud security posture (CSPM)

Argus

Connecting your cloud accounts, the checks behind each scan and the compliance frameworks Argus reports against, from CIS to PCI DSS.

Open docsdocs.argus.wazuh.com
Vulnerability & threat intelligence

Pharos

Watching your fleet against the CTI corpus: subscriptions, the read-only sidecar and alerts on what actually affects you.

Open docsdocs.pharos.wazuh.com
Your Wazuh environments, in one place

Fleet

Bringing every Wazuh environment you run into one place, with a shared view of alerts, agents and health across your deployments.

Open docsdocs.fleet.wazuh.com
Agentic support

Vesper

How to ask Vesper for help, what the assistant can fix on its own and how it draws on the knowledge of the whole Wazuh community.

Open docsdocs.vesper.wazuh.com