(Unofficial) Wazuh integration to send alerts to IRIS.

An open-source MCP server for integrating Wazuh security data with LLMs (such as the Claude Desktop App). This service authenticates with the Wazuh RESTful API, retrieves alerts from Elasticsearch indices, transforms events into an MCP-compliant JSON format, and exposes an HTTP endpoint for Claude Desktop to fetch real-time security context.

A Wazuh SIEM XDR integration that aims to enrich Wazuh alerts using VirusTotal and AlienVault OTX

Wazuh and Trivy integration to scan Docker image vulnerabilities.

☢️ Python script to send Wazuh alerts to Telegram by bot.

Setting Up Wazuh SIEM/XDR Homelab and Integration of Microsoft Defender into it.

MCP server for fetch web page content using Playwright headless browser.

MCP for Security: A collection of Model Context Protocol servers for popular security tools like SQLMap, FFUF, NMAP, Masscan and more. Integrate security testing and penetration testing into AI workflows.

Kubernetes Operator for deployment Wazuh Agent

This Python script integrates with Wazuh to automate sending secure, customizable email alerts with dynamic content based on JSON alert data, ensuring efficient real-time notifications.

An MCP server for fetching URLs / Youtube video transcript.

This is a tuned Discord integration for Wazuh. It uses webhook from Discord to send important Wazuh alerts to a Discord channel on a Discord server

On progress

wazuh-dfn - A specialized daemon that integrates Wazuh with DFN SOC