# Wazuh alternatives: what AI models name instead, November 2026

Gane Index, November 2026 Edition. 201 of the 252 answers in the 1 category where Wazuh holds a standing named it neither first nor as an alternative; these are the first choices those answers made. Page: https://www.gane.ai/index/it/vendors/wazuh/alternatives

## Named instead, most often (every category and segment added)

- Microsoft Sentinel: 65
- Splunk Enterprise Security: 24
- ManageEngine Log360: 14
- Blumira: 9
- Exabeam: 7
- Rapid7 InsightIDR: 6

## SIEM platforms

**Small business**: 52 of 84 answers did not name Wazuh (Wazuh is #3 of 14 at 21%).

- ManageEngine Log360: first choice in 11 of those 52
- Blumira: first choice in 9 of those 52
- Microsoft Sentinel: first choice in 9 of those 52
- Huntress Managed SIEM: first choice in 3 of those 52
- Sumo Logic Cloud SIEM: first choice in 3 of those 52
- Rapid7 InsightIDR: first choice in 2 of those 52
- AlienVault OSSIM: first choice in 1 of those 52
- Blackpoint Cyber: first choice in 1 of those 52

**Mid-market**: 65 of 84 answers did not name Wazuh (Wazuh is #2 of 15 at 15%).

- Microsoft Sentinel: first choice in 23 of those 65
- Rapid7 InsightIDR: first choice in 4 of those 65
- Splunk Enterprise Security: first choice in 4 of those 65
- Exabeam: first choice in 3 of those 65
- LogRhythm: first choice in 2 of those 65
- IBM QRadar: first choice in 1 of those 65
- ManageEngine Log360: first choice in 1 of those 65
- Securonix Unified Defense SIEM: first choice in 1 of those 65

**Enterprise**: 84 of 84 answers did not name Wazuh.

- Microsoft Sentinel: first choice in 33 of those 84
- Splunk Enterprise Security: first choice in 20 of those 84
- Exabeam: first choice in 4 of those 84
- IBM QRadar: first choice in 4 of those 84
- ManageEngine Log360: first choice in 2 of those 84
- Securonix Unified Defense SIEM: first choice in 2 of those 84
- Elastic Security: first choice in 1 of those 84
- Google Security Operations: first choice in 1 of those 84

Published under CC BY 4.0. The output is the models' output; nothing here is a recommendation by the index.