Zabbix: Monitoring Ledger 2026

Part of the Infrastructure Monitoring Ledger (edition 2026-10-04). How the scores work: methodology.

Snapshot

Tier: Leader incumbent
Owner: Zabbix SIA / Zabbix LLC, founder-owned (Alexei Vladishev) since 2005, no venture capital or private equity
Licence model: AGPLv3 since 7.0 (GPLv2 before), no open-core split; paid support tiers Silver to Global, training and Zabbix Cloud
Products scored: Zabbix 7.4 (with 7.0 LTS) open-source server, proxies, agents and frontend; 8.0 LTS RC1 counted half at most
Latest release: Zabbix 7.4.0, 2025-06-30, with 7.0 LTS maintained; 8.0.0rc1 tagged 2026-10-01
Next signal: 8.0 LTS GA in October 2026 (MCP server, OpenTelemetry tracing, event console); 8.2 in March 2027 with NetFlow, topology and log management
Archetype: Open-source workhorse, public roadmap
Evidence grade: A. Release notes, public roadmap, git tags and registries read directly; the date of the first official Proxmox and Nutanix templates is not given.

Scorecard

Dimension	Score	Direction
Capability today	83.4 / 100	higher is better
Momentum since end of 2022	+8.0 points	higher is better
Credibility	23.5 / 25	higher is better
Commercial risk	3.0 / 25	lower is better
Technical lock-in	4.0 / 25	lower is better
Integrator fit	15.5 / 20	higher is better
AI leverage	9.0 / 20	higher is better
Ledger Index	79.4 / 100	balanced weights

Capability by domain

Scores 0 to 5 against fixed anchors; total is weighted to 100.

Domain (weight)	2016	2019	2022	Today
Server, virtualization and storage (12)	3.5	3.5	4.5	4.5
Network monitoring (12)	3	3	3	3.5
Application and service monitoring (10)	3	3.5	4	4
Data collection and scale (12)	4	4	4.5	5
Alerting and event management (12)	4	4	4	4
Visualisation and reporting (8)	3	3.5	4	4
Logs and traces (8)	3	3	3	3.5
Automation and remediation (8)	3.5	4	4	4
Security and compliance (8)	3	3	4	4.5
New-platform support (VMware exit) (10)	1	1.5	2.5	4.5
Total / 100	62.8	66.4	75.4	83.4

Year by year: 2016: 62.8 · 2017: 62.8 · 2018: 62.8 · 2019: 66.4 · 2020: 67.2 · 2021: 67.2 · 2022: 75.4 · 2023: 75.4 · 2024: 78.6 · 2025: 78.6 · 2026: 83.4

What moved the score

Year	Domain	Change	Points	Trigger
2019	Application and service monitoring	3 → 3.5	+1.0	4.0/4.4: HTTP agent, Agent 2 database plugins, Prometheus endpoint scraping
2019	Automation and remediation	3.5 → 4	+0.8	4.4: JavaScript webhooks for two-way ServiceNow, Jira and Zendesk tickets
2019	New-platform support (VMware exit)	1 → 1.5	+1.0	4.4: Docker via Agent 2, AWS templates; no Proxmox, AHV or Kubernetes
2019	Visualisation and reporting	3 → 3.5	+0.8	3.4/4.4: grid dashboards with widgets; kiosk mode for NOC walls
2020	Security and compliance	3 → 3.5	+0.8	5.0/5.2: SAML SSO, HashiCorp Vault secrets, granular user roles
2022	Application and service monitoring	3.5 → 4	+1.0	6.0: business service trees with SLA and error budgets
2022	Data collection and scale	4 → 4.5	+1.2	6.0: native server HA cluster; TimescaleDB storage; 100,000+ values per second
2022	New-platform support (VMware exit)	1.5 → 2.5	+2.0	6.0: Kubernetes and AWS, Azure, GCP templates; Proxmox only via community templates
2022	Security and compliance	3.5 → 4	+0.8	6.0/6.2: CyberArk vault, audit log, bcrypt; 2022 KEV flaws fall outside the 2023-2026 window
2022	Server, virtualization and storage	3.5 → 4.5	+2.4	6.0/6.2: Kubernetes templates, Redfish for iDRAC and iLO, Ceph, NetApp and Pure templates
2022	Visualisation and reporting	3.5 → 4	+0.8	5.4/6.0: multi-page dashboards, scheduled PDF reports, geomap; maps still drawn by hand
2024	Data collection and scale	4.5 → 5	+1.2	7.0: proxy groups with failover and load balancing; asynchronous multi-threaded pollers
2024	Network monitoring	3 → 3.5	+1.2	7.0: asynchronous SNMP and parallel discovery; SD-WAN templates; flow and NCM still external
2024	Security and compliance	4 → 4.5	+0.8	7.0: native MFA with TOTP and Duo, JIT provisioning; no FIPS build documented
2026	Logs and traces	3 → 3.5	+0.8	6.4/7.0 streaming to Kafka; OpenTelemetry trace intake only in 8.0 RC1, half a step
2026	New-platform support (VMware exit)	2.5 → 4.5	+4.0	By 7.4: official Proxmox VE and Nutanix Prism templates, OpenStack, OCI; no XCP-ng or KubeVirt

Direction, 2023 to 2026

Each item carries one theme and one driver (V vision, C customer need, M market window, U upstream, P portfolio).

Date	Item	Theme	Driver
2023-03	6.4: cause and symptom problems; Kafka streaming; JIT user provisioning	D5 Alerting and events	C
2024-04	AGPLv3 licence announced for 7.0	D12 Packaging and licensing	V
2024-06	7.0 LTS: proxy groups with HA and load balancing; asynchronous pollers	D4 Collection and scale	C
2024-06	7.0: GPU plugins for NVIDIA DCGM and AMD ROCm	D1 Server and virtualization	M
2024-06	7.0: LLM alert summaries via OpenAI and Ollama webhooks	D7 AI-assisted operations	V
2024-06	7.0: native MFA with TOTP and Duo	D9 Security	C
2024-06	7.0: synthetic browser monitoring	D3 Applications and services	C
2024-10	Zabbix Cloud managed SaaS launched	D12 Packaging and licensing	P
2025-01	7.2: environment variables in configuration files	D10 Automation and remediation	C
2025-06	7.4: nested discovery, OAuth 2.0, host wizard	D1 Server and virtualization	C
2025-10	Acquires IZI-IT to form Zabbix France; Zabbix Academy	D11 Ecosystem openness	P
2026-10	8.0 RC1: OpenTelemetry tracing intake and event console	D8 Logs and traces	M
2026-10	8.0 RC1: official MCP server for AI agents	D7 AI-assisted operations	V

Centre of gravity: Packaging and licensing (2), Server and virtualization (2), AI-assisted operations (2)
Driver mix: Vision 23%, Customer need 46%, Market window 15%, Upstream 0%, Portfolio 15%

Credibility: 23.5 / 25

Criterion	Score	Basis
Cadence	5	LTS every 18 to 24 months and point releases every six months, per published policy
Roadmap transparency	5	Written public roadmap to 9.0 with ZBXNEXT issues in an open tracker
Say-do	4.5	15 of 17 items due by now shipped on time; NetFlow and topology slipped to 8.2
Velocity	4.5	Several substantive features per release, e.g. proxy groups, browser checks, MFA in 7.0
Lifecycle stability	4.5	Published LTS policy with long support and in-place upgrades; Oracle backend deprecated

Say-do record, 2023 to 2026: 23 items 2023-2026: 15 shipped on time, 5 in 8.0 RC1 and on track, 2 slipped (NetFlow ZBXNEXT-37 by about 2.5 years, L2/L3 topology by six months), 1 pending for 8.4, none dropped.

Commercial risk: 3.0 / 25 (lower is better)

Criterion	Score	Basis
Price and licence volatility	1.5	Licence moved from GPLv2 to AGPLv3 with 7.0 in 2024; no feature gating
Purchase constraints	0.5	Software free; support optional, per server and proxy, five tiers
Channel and access	0	Open downloads, docs, roadmap and partner programme
Owner stability	0.5	Founder-owned for 20 years; small acquisition of IZI-IT in 2025
Cost of staying supported	0.5	Free updates and LTS; support prices quote-based

Security record of the product itself: CVE-2022-23131 and CVE-2022-23134 (frontend SAML bypass and setup RCE) were added to KEV on 2022-02-22, outside the 2023-2026 window, so no deduction; both were fixed in 5.4.9 about 41 to 62 days before listing (the security record). No KEV entries 2023-2026.

Technical lock-in: 4.0 / 25 (lower is better)

Criterion	Score	Basis
Formats	0.5	Documented SQL schema; templates and config in public JSON, YAML and XML
Export path	1	Full API including history.get, streaming connectors; no import tools into other products
Stack coupling	1	PostgreSQL, TimescaleDB or MySQL; own open agents plus SNMP, IPMI, JMX, Prometheus intake
Hardware / cloud coupling	0	Packages, containers and appliances on any hardware; air-gapped capable
Skills and tooling coupling	1.5	Zabbix trigger and template skills are product-specific but widespread

Integrator fit: 15.5 / 20

Criterion	Score	Basis
Partner programme openness	4.5	Open partner programme from Certified to Global tier, with regional subsidiaries
Multi-tenancy and self-service	2.5	Host groups, user roles and per-tenant proxies; no MSP portal or billing
API and infrastructure-as-code	4	Full JSON-RPC API; community.zabbix Ansible collection with 16.5M downloads; community Terraform provider
Skills and certification	4.5	ZCU, ZCS, ZCP and ZCE certifications plus Zabbix Academy since 2025

AI leverage: 9.0 / 20

Strand	Today	Latest step
AIOps on monitoring data	2.5	2024: 7.0: Agent 2 plugins for NVIDIA DCGM and AMD ROCm GPU metrics
AI platform stack	1	2024: 7.0: webhook integrations sending alerts to OpenAI, Azure OpenAI or local Ollama
AI-assisted operations	2.5	2024: 7.0: LLM-written alert summaries delivered by webhook; no in-product assistant
Agent openness	3	2026: 8.0 RC1: official MCP server, GA due October 2026

AI say-do: 2 announced, 2 GA (GPU plugins, LLM webhooks), 0 preview, 0 pending, 0 dropped; the official MCP server is in 8.0 RC1. The AI is statistical trigger functions plus LLM summaries by webhook.

Reading

Zabbix is extending a fully open-source monitoring core toward tracing, event processing and AI agent access in 8.0, with flow and topology to follow in 2027. Its record is the most transparent here: a public roadmap, regular LTS releases, strong scale and HA, and few slips. The gap a buyer must fill is network depth, since flow analysis, configuration backup and automatic topology still need other tools.

Open questions and evidence caveats

The 8.0 features (MCP, OpenTelemetry, event console) are RC1 at the cutoff and count half a step at most.
The first release with official Proxmox and Nutanix templates is not dated in the research.
Scale figures are vendor statements; the millions-per-second target belongs to 8.0.
NetFlow has slipped from a 2024 target to March 2027.