Wazuh open-source platform aims to close shadow IT blind spots via endpoint inventory checks

Wazuh, a free and open source SIEM/XDR platform, collects system inventory data directly from monitored endpoints and compares it against network discovery scans to surface unmanaged devices, unauthorized software, and monitoring gaps. The approach targets shadow IT—hardware, software, and services running outside IT and security teams' visibility—such as unenrolled workstations, forgotten virtual machines, and unapproved applications.