$ loading_
Query Wazuh alerts, investigate hosts, detect brute-force attempts, and summarize security events.
Copy the install command and let the AI configure it · recommended for beginners
No copy-paste install info for "Wazuh MCP Server" yet — see the docs or source repo.
Connect to the Wazuh manager and list high-severity security alerts from the last 24 hours, summarized by host, rule, and time.
A list of recent high-severity alerts with a summary grouped by host and rule.
Investigate the host web-01 and summarize its recent alerts, suspicious activity, and notable security risks.
A security overview for the host to support faster investigation.
Check Wazuh for brute-force attempts against SSH or login services and summarize the sources, targets, and time ranges involved.
A summary of suspected brute-force incidents and their key details.
Ops or security staff can connect it to a Wazuh manager to quickly query and organize recent security alerts. This reduces manual alert review and speeds up initial triage.
When a host shows abnormal behavior, users can use the tool to gather its related security events and alert signals. It is useful for quick host-level investigation and summarization.
If brute-force activity is suspected, users can use the tool to detect attempts and summarize source and target details. This makes it easier to spot concentrated attacks or repeated login abuse.
It is an MCP tool that connects to a Wazuh manager so an AI assistant can query security alerts, investigate hosts, detect brute-force attempts, and generate security summaries.
Based on the provided information, it at least requires connectivity to a Wazuh manager. Other details such as installation, authentication, or runtime are not provided; see the source repository.
It is focused on Wazuh security data, with capabilities for querying alerts, investigating hosts, identifying brute-force attempts, and generating security summaries rather than general-purpose search.
Query Wazuh in natural language for triage, hunting, audits, and response.
Connect Wazuh with AI for security analysis, agent management, and monitoring.
Query Wazuh in natural language for triage, hunting, audits, and response.
Query Wazuh SIEM in plain English for faster detection and triage.
Connect Wazuh SIEM with LLMs for security investigation and automated analysis.
Investigate SIEM alerts, hunt threats, and tune rules using natural language.