FreeBSD The Power to Serve

Wazuh on FreeBSD

Contact: José Alonso Cárdenas Márquez <acm@FreeBSD.org>

Wazuh is a free and open source platform used for threat prevention, detection, and response. It is capable of protecting workloads across on-premises, virtualized, containerized, and cloud-based environments.

Wazuh solution consists of an endpoint security agent, deployed to the monitored systems, and a management server, which collects and analyzes data gathered by the agents. Besides, Wazuh has been fully integrated with the Elastic Stack or OpenSearch Stack, providing a search engine and data visualization tool that allows users to navigate through their security alerts.

During this quarter, there were many bugfixes and improvements to wazuh ports.

A quickly Wazuh jail installation to test it can be done using Wazuh AppJail-Makejails.

A big thank to Entersekt for sponsor my work. Now I can use a RockPro64 (aarch64) for Wazuh testing/packaging.

People interested in helping with the project are welcome.

Current version: 4.11.0

TODO

  • Add Wazuh cluster-mode infrastructure AppJail makejails

  • Add vulnerability detection support to FreeBSD Wazuh agent

  • Add FreeBSD like official support platform by Wazuh Inc

  • Update FreeBSD SCA Policies to new FreeBSD CIS Benchmark

Sponsor: Entersekt


Last modified on: April 13, 2025 by Alonso Cárdenas Márquez