$ loading_
Connect Wazuh SIEM with LLMs for security investigation and automated analysis.
Copy the install command and let the AI configure it · recommended for beginners
No copy-paste install info for "Wazuh MCP Server" yet — see the docs or source repo.
Connect to the Wazuh MCP Server and summarize all high-severity security alerts from the last 24 hours, grouped by host, rule name, and severity. Identify the top 5 incidents that need immediate attention.
A prioritized alert summary with key hosts, alert types, and recommended actions.
Use the Wazuh MCP Server to review abnormal logins, privilege escalation, and file change events on host server-01 over the last 7 days. Determine whether there are signs of compromise and provide an investigation conclusion.
A host security analysis report describing suspicious behavior, likely risks, and whether further response is needed.
Based on the malicious process detections and misconfiguration alerts currently found in Wazuh, create a remediation checklist for the operations team, ordered by impact and implementation difficulty.
A structured remediation checklist with issue descriptions, priorities, recommended actions, and validation steps.
Query Wazuh in natural language for triage, hunting, audits, and response.
Query Wazuh in natural language for triage, hunting, audits, and response.
Investigate SIEM alerts, hunt threats, and tune rules using natural language.
Query Wazuh alerts, investigate hosts, detect brute-force attempts, and summarize security events.
Access Wazuh security alerts, vulnerabilities, and network docs using natural language.
Validate Wazza MCP client infrastructure, tool discovery, and tool invocation flows.