Sold by: Perimattic ManageStacks
Deployed on AWS
AWS Free Tier
Production-ready Wazuh SIEM with full root access, automated configuration, and security hardening - an open-source alternative to commercial SIEM solutions for threat detection on AWS.
Overview
This fully managed Wazuh solution delivers a production-ready SIEM and security monitoring platform on AWS, built on Ubuntu 24.04 LTS. Every instance is pre-configured with security best practices, optimized indexing, and automated operations.
Why Choose Wazuh on AWS?
Wazuh provides enterprise-grade security monitoring without commercial SIEM licensing costs. This AMI gives you full root and OS-level access to configure custom rules, decoders, integrations, and compliance modules. Deploy a complete security operations center with intrusion detection, vulnerability scanning, and compliance reporting.
Key Features
Complete SIEM Platform Wazuh Manager, Indexer, and Dashboard pre-configured and ready to receive agent data. Monitor file integrity, detect intrusions, assess vulnerabilities, and generate compliance reports.
Automated Setup On first login, an interactive setup script configures all Wazuh components, sets up certificates, and applies firewall rules - all within minutes.
Security Hardened TLS encryption between all components, UFW firewall pre-configured, secure API authentication, and latest security patches applied.
Compliance Ready Pre-built rules and dashboards for PCI DSS, HIPAA, GDPR, NIST 800-53, and CIS benchmarks. Generate audit-ready compliance reports out of the box.
Use Cases Security information and event management (SIEM) Intrusion detection and threat hunting File integrity monitoring across servers Vulnerability detection and assessment Regulatory compliance monitoring and reporting Cloud security posture management for AWS environments
Getting Started Launch the AMI from AWS Marketplace on your preferred instance type SSH into your instance and follow the interactive setup wizard Install Wazuh agents on your endpoints and start monitoring
Book a free setup consultation at https://cal.com/gaurav-pareek-perimattic/marketplace-setup-consultations or email us at aws-support@perimattic.com .
Support Managed and supported by Perimattic, a cloud infrastructure company with 13+ years of experience serving global clients. We offer free setup assistance, custom integrations, infrastructure consulting, and 24/7 support.
Highlights
- Enterprise SIEM Without Licensing Costs: Complete Wazuh stack with Manager, Indexer, and Dashboard pre-configured for intrusion detection, vulnerability scanning, and compliance reporting.
- Compliance Ready Out of the Box: Pre-built rules and dashboards for PCI DSS, HIPAA, GDPR, NIST 800-53, and CIS benchmarks with audit-ready report generation.
- 24/7 Expert Support by Perimattic: 13+ years of cloud infrastructure expertise with free setup assistance, SIEM configuration, and dedicated support at aws-support@perimattic.com.
Details
Sold by
Categories
Delivery method
Delivery option
64-bit (x86) Amazon Machine Image (AMI)
Latest version
Operating system
Ubuntu 24.04
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
If you are an AWS Free Tier customer with a free plan, you are eligible to subscribe to this offer. You can use free credits to cover the cost of eligible AWS infrastructure. See AWS Free Tier for more details. If you created an AWS account before July 15th, 2025, and qualify for the Legacy AWS Free Tier, Amazon EC2 charges for Micro instances are free for up to 750 hours per month. See Legacy AWS Free Tier for more details.
- ...
Dimension | Cost/hour |
|---|---|
t3.medium Recommended | $0.05 |
t3.micro | $0.05 |
c1.xlarge | $0.05 |
c3.2xlarge | $0.05 |
c3.4xlarge | $0.05 |
c3.8xlarge | $0.05 |
c3.large | $0.05 |
c3.xlarge | $0.05 |
c4.2xlarge | $0.05 |
c4.4xlarge | $0.05 |
Dimensions summary
You pay by the hour for the EC2 instance type that runs your managed Wazuh deployment. Pricing scales with the compute size you pick, not with users or data volume. Each listed dimension maps to one AWS instance type across families like compute-optimized (c), memory-optimized (r, x), storage (i, d), general purpose (m, t), and accelerated (g, p, inf, trn). Hourly rates rise as an instance adds CPU, memory, or specialized hardware. You choose the instance that matches your monitoring workload, and billing follows actual hours used.
Top-of-mind questions for buyers
Each unit is one EC2 instance of the chosen type, billed per hour. That instance runs a dedicated, managed Wazuh deployment for SIEM and security monitoring. The software stays standard and your data stays in your cloud account, with provisioning, patching, backups, and monitoring handled.
The hourly software charge meters running time only. A fully stopped instance does not accrue software charges. Stopped instances may still incur underlying AWS storage fees for attached volumes, but those are separate from this listing's hourly rate.
No. Cost follows only the instance type you select and the hours it runs. Pricing does not vary with the number of users, hosts monitored, or log volume. A heavily used instance costs the same hourly rate as a quiet one of the same type.
perimattic.com
Helpful?
Vendor refund policy
For any questions or concerns, please contact: Perimattic.com Email: aws-support@perimattic.com
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
Security and maintenance refresh.
- Rebuilt from a current Ubuntu 24.04 base image and fully patched, addressing the operating-system vulnerabilities reported by the AWS Marketplace security scan.
- Built by an automated, reproducible EC2 Image Builder pipeline rather than by hand, so future security refreshes ship on a monthly schedule.
- Hardened: SSH password authentication and direct root login are disabled, SSH host keys are generated per instance on first boot, and no credentials, shell history or build-host identity is present in the image.
- Container runtime consolidated onto the Ubuntu-maintained Docker packages so it is patched automatically, and Docker Compose is now installed explicitly rather than relied upon.
Additional details
Usage instructions
- Launch an Instance
From AWS Marketplace, click Continue to Subscribe, then Continue to Configuration, and launch the AMI.
- Choose the Recommended Instance Type
Select t2.medium or higher for optimal Wazuh SIEM performance. Larger instance types improve indexing, dashboard responsiveness, and agent capacity.
- Configure Security Group
Allow inbound traffic on the following ports:
- 22 (SSH) - For secure terminal access
- 80 (HTTP) - Required temporarily for SSL validation
- 443 (HTTPS) - Secure access to Wazuh Dashboard
For monitoring external endpoints (agents):
- 1514-1515 (TCP) - Agent communication
Optional (can add later):
- 514 (UDP) - Syslog collection
- 55000 (TCP) - API access
- Connect to the Instance
Use SSH to connect: ssh -i <your-key.pem> ubuntu@<public-ip>
- First-Boot Setup (Guided)
On first login, an interactive guided setup will automatically start:
- Detects public IP
- Prompts for domain name
- Validates DNS A-record if domain provided
- Asks for admin email for SSL certificate
- Generates secure admin password (stored in /opt/app/admin_password.txt and /opt/app/.env)
- Configures Apache reverse proxy with SSL
- Deploys Wazuh stack using Docker Compose
- Displays access URL & credentials (~5-7 minutes)
- DNS Configuration
Before setup, add this DNS A-record if using custom domain:
yourdomain.com <your-instance-public-IP>
- Automatic SSL Setup
After DNS validation:
- Enables HTTPS access via Let's Encrypt certificate
- Redirects HTTP to HTTPS automatically
- Configures security headers
- Start / Restart Wazuh Manually (if needed)
cd /opt/app docker compose ps docker compose restart
Persistent volumes preserve security events, logs, and configurations across restarts.
- Access the Wazuh Dashboard
Open your browser and visit: https://<your-domain> (or) https://<public-ip>
Credentials are printed after setup and saved in:
/opt/app/admin_password.txt /opt/app/.env
Default user:
Username: admin Password: <auto-generated-password>
- Retrieve Credentials Anytime
cat /opt/app/admin_password.txt cat /opt/app/.env
Files contain: password, domain, email, and version information.
- Deploy Wazuh Agents
From Dashboard: Agents > Deploy new agent Select OS (Windows/Linux/macOS) and follow installation commands. Agents connect to ports 1514/1515.
- Troubleshooting
View logs: docker compose logs wazuh.dashboard
Check status: docker compose ps
Reset installation: sudo rm /var/log/wazuh-first-login-done bash /opt/app/failsafe.sh
Thank you for subscribing. Your instance is ready to go!
Need Support or Customization? Whether you're facing setup issues or need custom features, Perimattic's expert team is here to help:
Email us: aws-support@perimattic.com WhatsApp: +91-92142 66896 Learn more: <www.perimattic.com >
We offer: Free setup assistance Custom development & integrations Infrastructure consulting Automation & AI solutions With 13+ years of experience serving global clients, we ensure your deployment runs smoothly and scales with your needs.
Let's build something great together!
Resources
Support
Vendor support
Support by Perimattic
Perimattic provides 24/7 support for all AWS Marketplace products. Our team has 13+ years of cloud infrastructure expertise serving global clients.
Contact Channels: Email: aws-support@perimattic.com WhatsApp: +91-92142 66896 Website: <www.perimattic.com >
What We Help With: Initial setup and configuration assistance (free) Troubleshooting connectivity, performance, and backup issues Custom development and integrations Infrastructure consulting and architecture review Migration planning from other solutions Automation solutions and scaling guidance
Instance Sizing Guidance: t2.medium or t3.medium: Development environments, small applications m5.large: Production workloads with moderate traffic m5.xlarge: High-traffic production deployments and larger datasets
For workload-specific sizing recommendations, contact our team for a free consultation.
Refunds and Issues: If you experience any issues or need to request a refund, contact us at aws-support@perimattic.com and we will respond promptly.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
Healthchecks 5.0.3 (BSD-3-Clause) with PostgreSQL 17 on Ubuntu 24.04, with HTTPS, sign-up closed and a generated administrator created before the site is published. Alert email needs your own SMTP server.
Production-ready PostgreSQL with full root access, automated backups, security hardening, and performance tuning on AWS.
WafCharm is an automated managed service that sits on top of your AWS WAF to simplify and strengthen your firewall protection. WafCharm automatically configures, curates and updates AWS WAF rules in order to respond to new vulnerabilities. In addition to responding to new vulnerabilities quickly, WafCharm also helps reduce dealing with false positives by configuring WAF rules that are unique to your application.
Production-ready MariaDB 11 with full root access, automated backups, and security hardening on AWS.
Customer reviews
No customer reviews yet
Be the first to review this product . We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.