Wazuh on Ubuntu 24.04 LTS
Techforce Services Inc · Cybersecurity & IT
Certification per AWS Marketplace.
Evidence tier Source Confirmed · 4 captures on record
What the publisher says
As described on AWS Marketplace.
This AWS Marketplace AMI provides a production-ready deployment of Wazuh on Ubuntu 24.04, optimized for Amazon EC2 environments. The image includes Wazuh Manager, Wazuh Indexer, Wazuh Dashboard, and Filebeat preinstalled and preconfigured for rapid security monitoring deployment.
Wazuh is an open-source SIEM and XDR platform that delivers centralized log analysis, intrusion detection, endpoint monitoring, vulnerability detection, compliance auditing, file integrity monitoring (FIM), and real-time threat detection. The AMI is designed for organizations seeking a scalable and easy-to-deploy security operations platform in AWS.
Show the rest of the publisher’s description (18 more lines)
Key capabilities include real-time event monitoring, security alerting, compliance reporting, cloud workload visibility, endpoint telemetry collection, and centralized dashboard management. The solution supports Linux, Windows, containers, and cloud infrastructure monitoring through Wazuh agents and integrations.
The AMI is suitable for SOC teams, MSSPs, enterprise security operations, compliance monitoring, cloud infrastructure protection, and centralized log management use cases.
Included Components:
Wazuh Manager
Wazuh Indexer
Wazuh Dashboard
Filebeat
Ubuntu 24.04 LTS
cloud-init support for AWS
Recommended Deployment:
Minimum: 2 vCPU, 8 GB RAM
Recommended: 4 vCPU, 16 GB RAM or higher
Default Ports:
443/TCP - Wazuh Dashboard
1514/TCP/UDP - Agent communication
1515/TCP - Agent enrollment
55000/TCP - Wazuh API
After launching the EC2 instance, configure security groups, access the dashboard via HTTPS, and register Wazuh agents to begin centralized monitoring and threat detection.
Highlights
Highlighted by the publisher on AWS Marketplace.
Production-ready Wazuh SIEM and XDR platform preinstalled on Ubuntu 24.04 for rapid AWS deployment and centralized security monitoring.
Integrated threat detection, vulnerability monitoring, file integrity monitoring (FIM), compliance auditing, and real-time log analysis.
Optimized for AWS EC2 with preconfigured Wazuh Manager, Indexer, Dashboard, Filebeat, and cloud-init support.
Agent build and provenance
See the full provenance
The layer-by-layer build, the evidence behind each claim, the risk basis and the cross-marketplace links are open to any account. Some rows are disclosed, some the source leaves Unknown; a free account shows you which.
Compliance
- FedRAMPConfirmedNot listed90%, registry-checkedNo FedRAMP Marketplace entry matched this vendor's domain, checked 2026-08-27registry recordas observed 2026-08-27
Confirmed means matched to a public authoritative registry. Claimed means the vendor or its listing states it, not yet cross-checked. A framework not shown was not found in any source we hold, which is not evidence against it. Not listed means a scoped registry check found no match for this vendor's domain: a No is a scoped registry check, not a compliance judgment. Confidence bands: 95% domain-verified, 90% registry-checked, 80% self-attested, 70% weak signal. Self-attested items marked “vendor's site” are gathered from the vendor's own website and are not verified by us.
Vendor
External enrichment · as of 2026-08-29
Plans and pricing as listed
21 listed- Hrs
- Hrs
- Hrs
- Hrs
- Hrs
- Hrs
- Hrs
- Hrs
- Hrs
- Hrs
- Hrs
- Hrs
Refund terms
As stated by the publisher on AWS Marketplace.
No Refund
Sources
Publisher resources
3 linksLinked repositories
Unknown means this listing does not publish a repository. It is not a statement that the code is closed, and a linked repository is not a claim that the publisher wrote it: the registry computes that relationship privately and does not publish it.
Evidence risk is the share of the build you cannot see before you deploy, not a security rating. Sign in to see the layer-by-layer basis for this band.

