MCP Server
Wazuh SIEM MCP Server
🎯 The Problem
The client needed to interact with their Wazuh SIEM security logs and alerts using natural language, but no out-of-the-box AI integration existed.
⚙️ The Solution
Developed a robust Model Context Protocol (MCP) server that securely connected to the Wazuh API. It exposed tools for searching logs, checking system health, and analyzing threats.
✅ The Result
Enabled security analysts to query complex security events instantly via Claude, drastically reducing incident response times.
Technologies Used
PythonMCP SDKWazuh APICybersecurityFastAPI