Overview
Elastic Security is the SIEM and extended detection product of Elastic, the company behind Elasticsearch. It combines AI-driven security analytics, native SOAR automation through Elastic Workflows, and endpoint protection through the Elastic Defend agent, which covers ransomware, memory and behaviour prevention[14][15]. Its AI features are model-agnostic: customers can use Elastic Managed LLMs or connect models from OpenAI, Anthropic, Google Gemini and others[15].
Elastic offers more deployment choice than most rivals: Elastic Cloud Serverless, Elastic Cloud Hosted on major clouds, or self-managed software that can be run locally or on Kubernetes[14]. The company states that it was named a Leader in the 2026 IDC MarketScape SIEM assessment and in The Forrester Wave for security analytics platforms in Q2 2025, and a Strong Performer in the Q2 2026 Forrester Wave for XDR platforms[15].
Elastic reported revenue of US$1.74 billion for the fiscal year ended 30 April 2026[25]. Its serverless security pricing is published and usage-based, with ingest from US$0.09 per GB and retention from US$0.017 per GB per month on the Essentials tier, effective 1 November 2025[14]. Self-managed deployments shift operational work, such as cluster sizing and upgrades, onto the customer.
What Elastic Security does
- Logs, metrics, APM and profiling on Elasticsearch
- Serverless, hosted and self-managed options
- Elastic Distributions of OpenTelemetry
- Separate low-cost Logs Essentials tier
- AI assistant for investigations
- Elastic APM agents and OpenTelemetry ingest
- Logs, metrics and traces in Elasticsearch
- Service maps and latency correlations
Elastic Security pricing
Serverless: Logs Essentials from US$0.07/GB ingest and US$0.017/GB/month retention; Complete from US$0.09/GB ingest and US$0.019/GB/month retention; metrics on Complete US$0.023/GB ingest (pricing effective 1 July 2026). Free trial available; length not stated on the page.
Elastic Security strengths and limitations
Strengths
- Low per-GB ingest and retention prices
- Excellent full-text log search
- Can be self-managed
- OpenTelemetry-first collection options
- Strong log search alongside APM
- Self-managed option for data sovereignty
Limitations
- Self-managed clusters require tuning expertise
- APM experience less automatic than agent-led rivals
- Multiple deployment models complicate comparisons
- Trial length not published
- Self-managed clusters require operational expertise
- Feature set differs between deployment options
Appears in
- Best SIEM Tools in 2026 #9
- Best EDR Solutions in 2026 #10
- Best Endpoint Protection Software in 2026 #10
- Best Observability Tools in 2026 #6
- Best APM Tools in 2026 #6
Elastic Security alternatives and competitors
Alternatives to Elastic Security: companies ranked in the same lists.
Splunk Enterprise Security
CrowdStrike
Datadog- Cisco Secure Client
Microsoft Power BI
Broadcom- Grafana
New Relic
Microsoft Azure AI Speech
ESET Inspect
Bitdefender GravityZone EDR- Sophos XDR
Is this your company?
Update the description, logo, image and link through the submission form. Editors review every change.
