Elastic Security
Elastic Security: Flexible SIEM analytics with extensive detection, hunting, and workflow capabilities. Ranked #2 of 25 in Security Analytics by our editors (9.3/10); pricing: Free plan · 14-day trial; best for teams wanting flexible, low-cost SIEM analytics.
At a glance
- Editor score9.3 / 10
- PricingFree plan · 14-day trial
- Best forTeams wanting flexible, low-cost SIEM analytics
- Free planYes
- Paid from$0.09/GB usage-based
- Founded2012 · Amsterdam, Netherlands and Mountain View, California
- Facts checked19 Sep 2026
Where it wins
- Detection rules support correlation, thresholds, indicators, fields, and machine learning
- Hundreds of integrations cover cloud, Kubernetes, endpoints, networks, and ticketing
- Free self-managed plan plus usage pricing from $0.09 per GB ingested
Where it doesn't
- Retention is billed separately from ingestion, starting at $0.017 per retained GB monthly
- Entity analytics and UEBA require the Security Analytics Complete plan
- Teams must choose between managed deployments and self-managed infrastructure
Our verdict on Elastic Security
Elastic Security is a SIEM and security analytics product for security operations teams. It collects data from endpoints, cloud environments, networks, and other sources, then supports detection, investigation, threat hunting, alert triage, and response workflows. Teams can run it through Elastic's managed Serverless and Cloud deployments or use self-managed deployment on premises, in public or private cloud, or in air-gapped environments. The free self-managed plan and hybrid deployment options suit organizations seeking flexible control over their security analytics stack.
Pricing is usage-based rather than a fixed monthly subscription. Security Analytics Essentials costs $0.09 per GB ingested each month and includes ad hoc analytics, machine learning, prebuilt detection rules, investigation and hunting, threat intelligence integration, endpoint protection, and other core capabilities. Retention is priced separately at as low as $0.017 per retained GB per month. Security Analytics Complete costs $0.11 per GB ingested monthly and adds entity analytics, UEBA, threat intelligence management, Elastic AI Assistant, advanced endpoint protection, private connectivity, and IP filtering. A 14-day trial is distinct from the free self-managed plan.
Its ecosystem spans AWS, Azure, Google Cloud, Kubernetes, Elastic Agent, threat intelligence, ticketing, email security, network, and endpoint security integrations. Detection can use KQL or Lucene custom rules, prebuilt MITRE ATT&CK mappings, event correlation, indicator matching, thresholds, and machine learning. ES|QL supports threat hunting, while native workflows handle triage, enrichment, response, notifications, and cases with external ticketing integrations. Choose Elastic Security when broad integrations and configurable analytics matter; teams seeking a narrowly managed service or simpler fixed pricing may prefer an alternative.
Your product? Our editors can test Elastic Security in depth and publish a review, labelled as paid · from $149/mo →
Elastic Security pricing
All 2 Elastic Security plans and prices →
Elastic Security fact sheet
| Free plan | Yes |
|---|---|
| Paid from | $0.09/GB usage-based |
| Deployment | Not verified |
| Data retention | Not verified |
| Log ingestion limit | Not verified |
| UEBA | Not verified |
| Anomaly detection | Not verified |
| Threat intelligence | Not verified |
| Case management | Not verified |
| Free trial | 14 days |
| Deployment | Cloud, Self-hosted |
| Platforms | Web |
| Integrations | 10 integrations: AWS, Azure, Google Cloud, Kubernetes, Elastic Agent, Threat intelligence … |
| Pricing | Free plan · 14-day trial (source) |
| Website | elastic.co |
| Facts checked | 19 Sep 2026 |
Elastic Security integrations
Elastic Security lists 10 integrations on its own site.
- AWS
- Azure
- Google Cloud
- Kubernetes
- Elastic Agent
- Threat intelligence
- Ticketing
- Email security
- Network
- Endpoint security
Alternatives to Elastic Security
- CrowdStrike Falcon Next-Gen SIEMBroad cloud SIEM with CQL hunting, cross-domain search, and automated response.9.4
- FortiSIEMBroad IT/OT event analytics and response for complex security operations.9.2
- Rapid7 InsightIDRIntegrated SIEM, behavior analytics, and response for security operations teams.9.1
See all Elastic Security alternatives →
Elastic Security vs the competition
- Elastic Security vs FortiSIEM
- Elastic Security vs Rapid7 InsightIDR
- Elastic Security vs IBM QRadar SIEM
- Elastic Security vs Sumo Logic
- Elastic Security vs Splunk Enterprise
- Elastic Security vs Devo Security Data Platform
Compare Elastic Security with any tool side by side →
Also Ranked In
Elastic Security is ranked in 8 of our directories; the 6 strongest besides Security Analytics.
Used Elastic Security? Be the first to review it
The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used Elastic Security for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.
Write a reviewTwo minutes · verified accounts only · read by an editor before it appears
Featured on iTechGuides
Elastic Security is listed in our Security Analytics directory. Add the badge to your site — it links back to this page.
<a href="https://www.itechguides.com/products/elastic-security/"><img src="https://www.itechguides.com/best/badge/elastic-security.svg" alt="Featured on iTechGuides" width="230" height="46"></a>
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update