At TecnetOne, we've been closely following every evolution of Wazuh, and the new 4.14.0 release brings improvements that are definitely worth highlighting.
Among the most interesting updates, this version expands the IT Hygiene functionality with a more comprehensive inventory that now includes browser extensions, active services on endpoints, and system users and groups.
A new dashboard has also been added, based on the Microsoft Graph API, enabling event auditing and activity monitoring in cloud services like Azure and Microsoft 365.
Additionally, Wazuh 4.14.0 introduces hot reloading for agent configuration, meaning fewer restarts and greater agility in management. As usual, multiple performance, reliability, and security enhancements have been applied throughout the platform.
In short, a version aimed at delivering more control, greater visibility, and even more efficient security management.
What’s New in Wazuh 4.14.0
More Complete and Visual Endpoint Inventory
One of the most practical new features in Wazuh 4.14.0 is the expanded endpoint inventory, which now offers a much more complete unified view. From the IT Hygiene section in the dashboard, you can easily access centralized panels with detailed information on browser extensions, active services, users, and groups on monitored systems.
In addition, the new browser extension inventory (available under the Software tab) allows you to see which plugins are installed on Windows, macOS, and Linux endpoints. This not only improves visibility but is also very useful for security auditing, regulatory compliance, and incident response tasks.
Wazuh IT Hygiene – Browser Extensions Panel
Unified Visibility of Services Across All Your Systems
With Wazuh 4.14.0, the new service inventory centralizes information on services across Windows, macOS, and Linux systems, including systemd units. This means you can now have a clear and consistent view of service statuses on all your endpoints, regardless of the operating system.
From a single panel, you can check details such as the current status of a service, its startup type, and key data to verify compliance with security policies. It’s ideal for teams that need full control over what’s running on each machine. In short, less manual work and more control over your infrastructure.
Wazuh IT Hygiene – Services Panel
Read more: Security and Regulatory Compliance with Wazuh
Users and Groups Under Control, All in One Place
In the Identity section of the Wazuh 4.14.0 dashboard, you can now find detailed inventories of users and groups collected directly from the endpoints you're monitoring — all centralized and hassle-free.
The user inventory displays key information such as username, account type, ID, and assigned shell, while the group inventory includes data like group ID and name. This visibility is essential for auditing, access control, and compliance tasks, especially in environments with multiple operating systems.
Wazuh IT Hygiene – Users Panel
Wazuh IT Hygiene – Groups Panel
Want to know more details? Check out the official system inventory documentation.
New Microsoft Graph Panel: Full Visibility Into Your Cloud Services
With version 4.14.0, Wazuh introduces a dedicated panel for the Microsoft Graph API, designed to help you easily and centrally monitor security events related to cloud services like Microsoft Azure.
This panel not only provides ready-to-use visualizations and built-in queries but also allows you to export data to CSV for external analysis. It also includes GeoIP processing, giving you geographic context for key events — ideal for identifying suspicious logins or unusual behavior in your cloud services.
A very useful tool if you work with Microsoft environments and want to keep everything under control from one central place.
Key Metrics and Geolocation in the Microsoft Graph Panel
The new Microsoft Graph panel in Wazuh 4.14.0 gives you a clear, organized view of cloud activity, with essential metrics like operation types, result statuses, most active regions, highlighted security alerts, and the distribution of events over time.
One of the most useful features is the geolocation map, which lets you see where in the world events are occurring, thanks to the integration of GeoIP processors in key fields. This makes it easier to analyze service behavior and potential threats based on their geographic origin.
And if you need to share or work with the data outside the panel, you can easily export it in CSV format to review with your team or create custom reports.
Review Events and Alerts with Advanced Filters
The Events section allows you to explore activity logs and audit data from Microsoft Graph in detail. From there, you can filter events, review operation outcomes, view matches with detection rules, and check the different alert levels generated.
A practical way to quickly identify what’s happening and take action with clear, actionable information.
Wazuh Graph API: Events Section
The new Microsoft Graph panel in Wazuh 4.14.0 doesn’t come alone — it integrates seamlessly with the existing panels for AWS and Google Cloud Platform (GCP). This means that if you’re working in multicloud environments, you’ll enjoy a unified monitoring experience, no matter which cloud you’re overseeing. Everything in one place, with a consistent visualization logic.
Interested in learning how to monitor Azure with Wazuh? Check out the official documentation on Microsoft Azure Monitoring.
Hot Reloading: More Flexibility, Less Downtime
Another major improvement in this version is the new active reload feature for the Wazuh agent. Now, when you apply configuration changes from the server, agents can update without needing to restart or lose connection to the manager.
This not only reduces downtime but also makes management much more efficient in environments with hundreds or thousands of endpoints. Modified configurations are applied automatically, and the agent logs entries confirming which parameters were updated.
Wazuh Keeps Growing, and at TecnetOne We Help You Get the Most Out of It
Wazuh continues to prove it’s much more than just a monitoring tool — it’s a robust, reliable, and ever-evolving open-source security platform. All driven by an active community that keeps improving it with every new release.
At TecnetOne, in addition to closely following every development, we also offer implementation, support, and customized Wazuh services to help you unlock its full potential in your environment.
If you're looking for a scalable, flexible security solution with no proprietary licenses, Wazuh is a great option — and we can help you implement it the right way.
