GOzuh - Wazuh mobile client

WISE Group Sp. z o.o.

About this app

GOzuh is a free, read-focused Android client for viewing information from a Wazuh environment that you configure yourself. It connects directly from your device to your Wazuh Manager API and Wazuh Indexer API. Your Wazuh traffic is not routed through a GOzuh-operated server.

Use GOzuh to:

• Review Manager, Indexer, and cluster health
• Monitor hosts and agent status
• Explore alerts, rule details, compliance mappings, MITRE ATT&CK data, and raw JSON
• Review unique CVEs, severity, CVSS, affected packages, and hosts
• Inspect hardware, operating system, packages, ports, interfaces, processes, FIM, and SCA data
• View fleet inventory and local vulnerability history

Designed for safe mobile visibility:

• Read-focused: no agent deletion, restart, upgrade, or manager restart actions
• Credentials and Manager tokens are encrypted locally using Android Keystore-protected keys
• Non-secret preferences and vulnerability history are stored only on your device
• Optional Biometric Lock uses Android system authentication
• No ads, analytics, tracking, or third-party telemetry

GOzuh can connect over HTTPS to public servers. Local HTTP is allowed only for eligible local addresses and is shown with a warning. You are responsible for securing your Wazuh infrastructure, accounts, certificates, network access, and device.

GOzuh is an independent app for users who already operate Wazuh. It is not affiliated with, endorsed by, sponsored by, or maintained by Wazuh, Inc. Wazuh is an open source security platform. Learn more at https://wazuh.com.

Privacy: https://gozuh.com/privacy.html

Support: https://gozuh.com/support.html

Terms: https://gozuh.com/terms.html

Connect to servers with untrusted SSL certificates by enabling “Allow insecure” separately for the Server API or Indexer API. The option supports self-signed and expired certificates and is off by default. With this option enabled, the server’s identity is not verified.

What’s new

Review Inbox helps you keep track of Wazuh alerts and CVEs that need attention. Review CVEs by package, explore affected hosts, and mark groups as reviewed.

Save views in Alerts and Vulnerabilities to quickly return to your preferred filters and sorting.

This update also includes small bug fixes and interface improvements.