FAQ about Stackhero for Wazuh cloud

We provide the Wazuh indexer, Wazuh server, Wazuh dashboard, and a reverse proxy, all pre-configured.
Wazuh is ready to use with nothing else to install.

You can run as many as your instance can support. Stackhero does not charge per agent or per endpoint: the full capacity of your instance is entirely dedicated to you.

Wazuh agents operate on Linux, Windows, and macOS. Network devices and appliances that cannot run an agent can be monitored via syslog.

Yes. Wazuh comes with rulesets and dashboards aligned with PCI DSS, GDPR, HIPAA, NIST 800-53, and TSC compliance. You can monitor and demonstrate compliance straight away.

You can retain data for as long as your instance's disk space allows. You manage the retention settings yourself, and Stackhero does not enforce any artificial limits.

Stackhero is committed to always providing you with a recent and stable version of Wazuh, so you benefit from the latest features and security updates.

Stackhero offers managed services, so SSH access is not available. If you have a specific requirement, please contact support and we will help you find a solution.

Absolutely! Your instance has its own firewall where you can decide which IPs have access to which port in two clicks.

We developed our own cloud software solution, making us entirely independent from cloud providers. We deploy this innovative solution directly on bare-metal servers, offering you exceptional performance and stability.

Stackhero is a French company operating under European and French laws.
Servers are located, depending on your choice, either in the European Union (France) or in the USA.
Backups are stored in the European Union.

Your service consists of multiple subservices. All of them operate in containers within a virtual machine entirely dedicated to you.
This VM is completely private and isolated from other clients, providing a highly secure environment with very high performance.
It is hosted on a bare-metal server running Stackhero DC OS, our own Linux distribution.

We use disks that are physically connected to your instances.
We do not use network disks, unlike traditional cloud solutions, which are slow and costly.
This way, we ensure optimal performance and exceptional IOPS.

The issue with traditional backup systems is that files are saved at different time intervals.
Let's say you have 2 files, a.txt and b.txt. Your backup starts at 9am and finishes at 10am.
The file a.txt will contain data from 9am and b.txt will contain data from 10am.
This is typical in backup systems and presents a significant problem leading to consistency issues.

This is why we developed an in-house backup system that captures an atomic image of your instance at a precise moment.
Atomic in the sense that we can guarantee all files from the backup are taken exactly at the same time.
If your backup starts at 9am, all files will have data from 9am. You have a perfectly consistent and reliable backup.

Backups are initially sent to a dedicated server, which verifies and validates the data. Once these checks are approved, the backups are encrypted and archived.
Encryption employs ECDH and Curve25519 as part of the OpenPGP protocol, with a unique key generated for each backup.

At the start of each month, our system calculates the number of hours your services were operational, and a detailed invoice is generated.
You receive a single monthly invoice that consolidates all your services, clearly explained and easy to understand. Your accounting department will appreciate that!

The primary mission of Stackhero is to provide a platform that is easy to use, extremely reliable, and highly secure.
A key element in achieving this mission is the annual attainment of the ISO 27001 certification, a globally recognised quality and security label.
This certification, awarded following a rigorous audit conducted by an independent external body, attests to compliance with the strictest international standards in information security.