Vigil
7.5#6 in siem softwareFree planFree planWebAPILinuxmacOS
Visit| Fact | Vigil | Wazuh |
|---|---|---|
| License | The repository and pricing page identify the software as Apache License 2.0. | Wazuh components are distributed under GNU GPL version 2 and Apache License 2.0, with the main repository code under GPLv2. |
| Public API | The repository documents a local API at port 6987 and interactive API documentation at /docs. | The Wazuh server exposes an open-source REST API covering agents, managers, clusters, FIM, MITRE, rules, decoders, SCA, syscollector and RBAC. |
Vigil is aimed at teams that want self-hosted endpoint event detection and structured output for AI agents. It may suit users who need HQL event hunting and explicit human approval for destructive actions.
Wazuh may suit organizations and individuals seeking security monitoring across endpoints, cloud services, and networks. It offers a self-hosted free option as well as paid Cloud plans.