Wazuh-MCP-Server

The project demonstrates a strong focus on security, implementing security-by-design principles like Zero Trust, Least Privilege, and Defense in Depth. It features robust authentication (JWT, OAuth 2.0 with DCR and PKCE), comprehensive input validation (SQLi/XSS prevention), CORS and origin validation, and rate limiting. Docker deployments are hardened with non-root execution, read-only filesystems, and minimal capabilities. Sensitive credentials are managed securely (e.g., generated if missing, recommendations for external secrets managers, file permission advice). Audit logging is supported. While `WAZUH_VERIFY_SSL` defaults to `false` in development configurations, the documentation explicitly recommends `true` for production. No 'eval', obfuscation, or obvious malicious patterns were found.