Wazuh Integration: AI decisions next to your endpoint alerts
If you run Wazuh, connect it and every AI decision arrives as a Wazuh alert your analysts already know how to triage. It is optional, and EndSecure does not replace Wazuh.
Join the waitlist for early access. Every module included.
Rules your SOC can read
EndSecure events match a small set of Wazuh rules, from an AI app detected to a blocked submission.
- Rule 100711, level 12Sensitive data to an AI tool was blocked.
- Rules 100712 and 100713A submission was redacted, or the user was warned.
- Rule 100714An AI application or local LLM was detected.
Connect in one step, or skip it
Setup offers the Wazuh step right after your organisation details. Skip it and add it later from the console.
- Manager APIAddress (usually port 55000), API user and TLS verification.
- Test the connectionSee straight away whether the manager answered.
- Nothing replacedThe Wazuh agent keeps running as before.
The same event, in both places
An incident in EndSecure shows the Wazuh alert in its timeline, so SOC and AI governance tell the same story.
Worth knowing: Wazuh is the supported security operations integration today. SIEM export, Syslog and Slack notifications are coming soon.
Works with the other five modules
Platform overview- AI DiscoveryFind cloud, desktop and local AI on every endpoint.
- EndSecure DLPCatch secrets and personal data before they leave.
- Policy EngineAllow, warn, block or redact with rules you can read.
- EnforcementStop a risky paste or upload before it is sent.
- EndSecure AI SensorA Windows service with heartbeat and health checks.
Early access
Secure every AI interaction.
See the AI your people use within a day of installing the sensor, and decide what happens to sensitive data.
- Onboarding early customers
- Every module included
- Early-access pricing first