Wazuh and Lumu Announce Partnership to Deliver Integrated Threat Intelligence

| by
Post icon

San Jose, California, September 2025 – Wazuh, the leading open-source Security Information and Event Management (SIEM) and Extended Detection and Response (XDR) solution, announced a partnership with Lumu, a cybersecurity company that enables organizations to measure and understand compromise in real time through its Continuous Compromise Assessment model. 

This integration enhances Wazuh’s SIEM and XDR capabilities by incorporating Lumu’s Maltiverse Threat Intelligence, giving users enriched context, greater visibility, and faster, more effective detection and response to cyber threats.

Maltiverse is available as an API-based integration for the Wazuh platform. It enriches security alerts with threat intelligence such as reputation data, geolocation, WHOIS, and malicious activity relationships. By providing this additional context, security teams can reduce investigation time, improve detection accuracy, and prioritize the most critical incidents.

Ricardo Villadiego, Founder and CEO at Lumu, said: “We’re excited to bring Maltiverse Threat Intelligence to the Wazuh community through a simple integration. Wazuh combines the power of open-source security with the flexibility organizations need to operate effectively. This partnership strengthens our mission to help organizations adopt high-quality threat intelligence and improve their defenses against evolving threats.”

Through this integration, organizations benefit from:

  • Automatic IOC enrichment: Real-time context for IPs, domains, URLs, and file hashes.
  • Faster investigations: Context delivered directly in the Wazuh console for quicker analysis.
  • Improved detection and response: Continuously updated feeds that reduce false positives and highlight real threats.

Santiago Bassett, Founder and CEO at Wazuh, said: “We are pleased to partner with Lumu to deliver advanced threat intelligence to our users. With Maltiverse integrated into Wazuh, security teams gain greater visibility and actionable insights without leaving the platform. Together, we are strengthening our community and empowering organizations worldwide to respond to threats with speed and confidence.”

About Lumu

Lumu is a cybersecurity company that helps organizations operate cybersecurity proficiently by measuring and understanding compromise in real time. Through its Continuous Compromise Assessment model, Lumu empowers security teams to act immediately on confirmed compromises and minimize risk exposure.

About Wazuh

Wazuh is a free and open source security platform that combines XDR and SIEM capabilities to protect endpoints and cloud workloads. Its open source nature allows organizations to customize its capabilities to meet specific security requirements, ensuring scalable and adaptable defense strategies.

To explore Lumu’s offerings and expertise further, please visit their official website. For additional information on Wazuh Partnerships, please visit our partners’ website.