Wazuh Announces AI Capabilities for Security Operations Centers

Wazuh has announced new artificial intelligence-powered capabilities aimed at improving Security Operations Center (SOC) workflows and reducing analyst fatigue. Within this scope, the automated Wazuh AI Analyst service for Wazuh Cloud and third-party AI integrations such as Llama 3 and Anthropic Claude have been made available.

As artificial intelligence technologies continue to transform many sectors, including cybersecurity, defenders are leveraging these tools to enhance threat detection and incident response. Facing heavy alert volumes, Security Operations Centers are turning to AI to support analysts, summarize findings, and suggest remediation actions.

The automated Wazuh AI Analyst, offered for Wazuh Cloud subscribers, processes security data via Amazon Bedrock and Anthropic's Claude infrastructure. This service regularly delivers key indicators, histograms, alert volumes, active vulnerabilities, and posture summaries via email, complete with full PDF reports.

Organizations can also integrate hosted language models operating locally on the Wazuh server, such as Llama 3 and Ollama for privacy-focused environments, or Claude 3.5 Haiku versions integrated into the dashboard via OpenSearch Assistant, into their systems.