A very unreliable project/product.

A very unreliable project/product. Among other things, the Vulnerability Detector consists exclusively of false positive entries, which have still not been eliminated even months after reporting. Even if packages are not considered to be affected based on the version number, they are still shown as vulnerable. The maintainer itself confirms that this package is no longer affected, but Wazuh is not interested as long as the package is classified as vulnerable in the CVE list/database. If, for example, you have secured the problem by compiling it yourself or using the maintainer's repo, Wazuh will classify it as vulnerable! It continues with threat detection. The opening of a session by a system process with uid=0 is classified as very threatening and assigned a extremely high rule level of 12! “see Rule 40101 -> pam_unix(su:session): session opened for user nobody by (uid=0)” Logrotate, for example, always generates these entries. Other interactions of the system that are actually highly threatening are not even checked and must be stored manually as a rule by the user. Since this morning, the complete Wazuh Manager/Indexer is broken or defective, the message “circuit_breaking_exception” appears immediately when logging in, it's a good thing I have a backup. This is the fourth time since using Wazuh for 5 months. User-friendliness is the next issue, with almost every interaction the interface resets itself. For example, if you hide columns and then accidentally click on an entry from the list and then go back to the list, the default columns are back and any settings for order, visibility, etc. are completely reset. Also the number of entries that should be displayed. If you have set the CVE list to 100 entries and are on page 5. Then this setting is reset as soon as you mark an entry as excluded for the filter. The developers of the system do not work with the system at all and have no idea about usability. In daily use, the whole thing is an absolute imposition. What makes it even worse. Wazuh is allegedly used by the big corporations! e.g: NASA, eBay, Cisco, Mondelez, Telefónica, etc. According to their own information over 100000 enterprise users! On the other hand, they do not manage to process the pull requests and over 2500 issues on Github. Many are ignored or incorrectly rejected, even if they are demonstrably correct.