Wazuh
Optional Security Add-on to EchoDesk GLPI
Threat detection, log analysis, vulnerability management and compliance monitoring — unified in a single platform.
What is Wazuh?
Wazuh is a free, open-source security platform that unifies XDR and SIEM capabilities. It protects workloads across on-premises, virtualised, containerised and cloud-based environments, providing enterprise-grade security without proprietary licensing fees.
As an EchoDesk add-on, security events become service desk work and sit alongside your GLPI asset inventory.
Core Capabilities
Threat Detection
Monitor endpoints for malware, rootkits, suspicious behaviour and unauthorised file modifications
Log Data Analysis
Collect, aggregate and parse logs from OS, applications, firewalls and cloud environments
Vulnerability Detection
Scan systems for missing patches and known CVEs in installed software
Configuration Assessment
Audit systems against security benchmarks (CIS) for hardened configurations
File Integrity Monitoring
Track changes to critical files and directories for compliance and intrusion detection
Active Response
Automated actions on threat detection: block IPs, isolate hosts, run remediation scripts
Why Use Wazuh for Compliance?
GDPR
Continuous monitoring, breach detection and audit logging for data protection
PCI-DSS
File integrity monitoring, log management and access control
ISO 27001 / NIST-2
Configuration assessment, vulnerability detection and security monitoring
Integration with GLPI
Wazuh turns security alerts into service desk actions and links them to your asset inventory.
Agent synchronisation
Wazuh agents synchronise with GLPI devices, linking security data to inventory.
Automated ticket creation
Security alerts from Wazuh automatically create GLPI tickets.
Device-level visibility
View alerts and vulnerabilities on GLPI device pages for full context.
Cross-referenced intelligence
Correlate Wazuh events with Zabbix performance data when both add-ons are taken.