TechWatchAlert
Sign in Free trial
NIS2PricingFAQSign inStart for free
Fleet and cloud

Wazuh

Your Wazuh agents already collect packages: TechWatchAlert turns them into precise CVE monitoring.

Start for free All connectors

What the connector does

The Wazuh connector reads, through the manager API, the packages Syscollector records on each active agent, Linux, Windows or macOS. Each agent's distribution is known, so Ubuntu, Debian or Red Hat packages can be compared with their distribution's advisories.

What comes into TechWatchAlert

  • Packages and apps from each active agent (Syscollector)
  • Each machine in the fleet, with its OS and distribution
  • A comparison with distribution advisories where they exist: a backported fix raises no false alert
  • Only products known to CVEs, added to the stack and removed when they disappear

Setup

  1. In Wazuh, create an API user linked to a read-only policy (agent:read and syscollector:read)
  2. Make sure the API presents a trusted certificate (the default self-signed certificate is refused)
  3. In TechWatchAlert, enter the API address (port 55000 accepted), the user and its password

In the same family

GLPIThe software inventoried in GLPI becomes your monitored stack, resynced automatically.View connector →Microsoft IntuneThe apps Intune detects on your managed devices, monitored with nothing to install.View connector →Jamf ProThe apps on your Jamf Pro-managed Macs, monitored Mac by Mac.View connector →AWS Systems ManagerThe software on your EC2 instances and hybrid servers, read from the Systems Manager inventory.View connector →Microsoft AzureYour Azure VMs and Azure Arc servers monitored through Change Tracking & Inventory.View connector →TechWatchAlert agent (Windows, Linux, macOS)A lightweight agent that reports the inventory and missing updates of every workstation and server.View connector →Microsoft Entra IDThe devices in your Entra ID directory join the fleet, with their OS and last sign-in.View connector →Active Directory (LDAP)The computers in your Active Directory, with their OS and last logon.View connector →Palo Alto Cortex XDREndpoints protected by Cortex XDR join the fleet, with their agent version.View connector →Microsoft Defender for EndpointDefender machines and the software installed on each, with no extra agent.View connector →ServiceNow CMDBThe computers in your CMDB and their software, monitored as ServiceNow knows them.View connector →
Connectors

Plug in your tools in minutes

Start with a repository, a fleet or a scan report: your first targeted alerts arrive with the first sync.

Talk to the team

Free plan, no credit card · hosted in France