Elastic Security

Search-based observability on the Elastic stack, self-managed or serverless

Overview

Elastic Security is the SIEM and extended detection product of Elastic, the company behind Elasticsearch. It combines AI-driven security analytics, native SOAR automation through Elastic Workflows, and endpoint protection through the Elastic Defend agent, which covers ransomware, memory and behaviour prevention[14][15]. Its AI features are model-agnostic: customers can use Elastic Managed LLMs or connect models from OpenAI, Anthropic, Google Gemini and others[15].

Elastic offers more deployment choice than most rivals: Elastic Cloud Serverless, Elastic Cloud Hosted on major clouds, or self-managed software that can be run locally or on Kubernetes[14]. The company states that it was named a Leader in the 2026 IDC MarketScape SIEM assessment and in The Forrester Wave for security analytics platforms in Q2 2025, and a Strong Performer in the Q2 2026 Forrester Wave for XDR platforms[15].

Elastic reported revenue of US$1.74 billion for the fiscal year ended 30 April 2026[25]. Its serverless security pricing is published and usage-based, with ingest from US$0.09 per GB and retention from US$0.017 per GB per month on the Essentials tier, effective 1 November 2025[14]. Self-managed deployments shift operational work, such as cluster sizing and upgrades, onto the customer.

What Elastic Security does

  • Logs, metrics, APM and profiling on Elasticsearch
  • Serverless, hosted and self-managed options
  • Elastic Distributions of OpenTelemetry
  • Separate low-cost Logs Essentials tier
  • AI assistant for investigations
  • Elastic APM agents and OpenTelemetry ingest
  • Logs, metrics and traces in Elasticsearch
  • Service maps and latency correlations

Elastic Security pricing

Serverless: Logs Essentials from US$0.07/GB ingest and US$0.017/GB/month retention; Complete from US$0.09/GB ingest and US$0.019/GB/month retention; metrics on Complete US$0.023/GB ingest (pricing effective 1 July 2026). Free trial available; length not stated on the page.

Elastic Security strengths and limitations

Strengths

  • Low per-GB ingest and retention prices
  • Excellent full-text log search
  • Can be self-managed
  • OpenTelemetry-first collection options
  • Strong log search alongside APM
  • Self-managed option for data sovereignty

Limitations

  • Self-managed clusters require tuning expertise
  • APM experience less automatic than agent-led rivals
  • Multiple deployment models complicate comparisons
  • Trial length not published
  • Self-managed clusters require operational expertise
  • Feature set differs between deployment options

Appears in

Elastic Security alternatives and competitors

Alternatives to Elastic Security: companies ranked in the same lists.

Is this your company?

Update the description, logo, image and link through the submission form. Editors review every change.

Update this listing

Is your company missing from a list?

Send your logo, description and link. Editors review every submission, and approved listings are clearly labelled.

Add your company