$ loading_
Query Wazuh in natural language for triage, hunting, audits, and response.
Copy the install command and let the AI configure it · recommended for beginners
No copy-paste install info for "wazuh-mcp-server" yet — see the docs or source repo.
Query high-severity alerts in Wazuh from the last 24 hours. Summarize them by host, rule name, and severity, and identify the top 5 alerts that need immediate attention with reasons.
A summary of high-severity alerts, a priority ranking, and triage reasons for each key alert.
Search Wazuh for the last 7 days to find whether the same IP is linked to abnormal logins, privilege escalation, or suspicious process activity across multiple hosts, and provide a correlated timeline.
A correlated view of suspicious IP events, affected hosts, and a chronological timeline of attack indicators.
Using Wazuh data, identify hosts with missing security patches, disabled log collection, or abnormal configurations, and generate a summary of audit findings.
A list of noncompliant hosts, categorized issue types, and a concise summary suitable for audit reporting.
Query Wazuh in natural language for triage, hunting, audits, and response.
Query Wazuh SIEM in plain English for faster detection and triage.
Investigate SIEM alerts, hunt threats, and tune rules using natural language.
Query Wazuh alerts, investigate hosts, detect brute-force attempts, and summarize security events.
Access Wazuh security alerts, vulnerabilities, and network docs using natural language.
Enable AI to analyze packets, scan networks, and assess security threats.