GOzuh

GOzuh is a free, read-focused Android client for viewing information from a Wazuh environment that you configure yourself. It connects directly from your device to your Wazuh Manager API and Wazuh Indexer API. Your Wazuh traffic is not routed through a GOzuh-operated server. Use GOzuh to: • Review Manager, Indexer, and cluster health • Monitor hosts and agent status • Explore alerts, rule details, compliance mappings, MITRE ATT&CK data, and raw JSON • Review unique CVEs, severity, CVSS, affected packages, and hosts • Inspect hardware, operating system, packages, ports, interfaces, processes, FIM, and SCA data • View fleet inventory and local vulnerability history Designed for safe mobile visibility: • Read-focused: no agent deletion, restart, upgrade, or manager restart actions • Credentials and Manager tokens are encrypted locally using Android Keystore-protected keys • Non-secret preferences and vulnerability history are stored only on your device • Optional Biometric Lock uses Android system authentication • No ads, analytics, tracking, or third-party telemetry GOzuh can connect over HTTPS to public servers. Local HTTP is allowed only for eligible local addresses and is shown with a warning. You are responsible for securing your Wazuh infrastructure, accounts, certificates, network access, and device. GOzuh is an independent app for users who already operate Wazuh. It is not affiliated with, endorsed by, sponsored by, or maintained by Wazuh, Inc. Wazuh is an open source security platform. Learn more at https://wazuh.com. Privacy: https://gozuh.com/privacy.html Support: https://gozuh.com/support.html Terms: https://gozuh.com/terms.html