--- title: Elastic Security Reviews meta_title: 'Elastic Security Reviews 2026: Details, Pricing, & Features | G2' meta_description: Filter 23 reviews by the users' company size, role or industry to find out how Elastic Security works for a business like yours. aggregate_rating: rating_value: 4.5 review_count: 23 scale: '5' date_modified: '2026-08-09' parent_category: name: Cloud Data Integration url: https://www.g2.com/categories/cloud-data-integration --- # Elastic Security Reviews **Vendor:** Elastic **Category:** [ETL Tools](https://www.g2.com/categories/etl-tools) **Average Rating:** 4.5/5.0 **Total Reviews:** 23 ## About Elastic Security Modernize your SOC with AI Security is a data problem. Your team needs to detect, investigate, and respond to threats quickly. Elastic Security unifies next-gen SIEM and XDR with native automation, with AI built into every step. Built on Elasticsearch, the open-source search platform trusted by millions, Elastic provides complete visibility across your environment. Our data mesh architecture streamlines analysis to raise team productivity and reduce attacker dwell time. Bolster your defenses - Detect threats faster by analyzing data from across your attack surface - Stop attacks with the industry's best-rated XDR protection - Close the loop faster with Elastic Workflows, blending scripted automation with agentic AI reasoning - Get more accurate AI assistance, grounded in your data using Elasticsearch's leading relevance capabilities With Elastic Security, your SOC team can use generative AI to distill alerts, automate repetitive tasks, and get tailored guidance, all with your choice of LLM and full transparency into reasoning and sources. SOC leaders choose Elastic Security when they need a unified, open platform ready to run on any cloud, on-prem, or air-gapped. ## Elastic Security Pros & Cons **What users like:** - Users value the **seamless integrations** of Elastic Security, enhancing data visualization and incident management efficiency. (7 reviews) - Users value the **ease of use** of Elastic Security, appreciating its straightforward setup and seamless integrations. (5 reviews) - Users admire the **flexibility and pre-built security use-cases** of Elastic Security for seamless integration and adaptability. (5 reviews) - Users appreciate the **easy integrations** of Elastic Security, facilitating seamless workflows and efficient investigations across tools. (4 reviews) - Users value the **efficiency improvement** in investigations, enabling quick, actionable insights with Elastic Security's robust features. (3 reviews) - Flexibility (3 reviews) - Implementation Ease (3 reviews) - Investigation Analysis (3 reviews) - Monitoring (3 reviews) - Solution Efficiency (3 reviews) **What users dislike:** - Users face challenges with **steep learning curves and operational overhead** , impacting efficiency and resource management in Elastic Security. (4 reviews) - Users find the **complex implementation** of Elastic Security challenging, especially due to the steep learning curve and maintenance overhead. (3 reviews) - Users find the **complexity** of maintaining Elastic Security's infrastructure and learning new query languages challenging and burdensome. (3 reviews) - Users point out the **complex setup** of Elastic Security, citing a steep learning curve and significant administrative overhead. (3 reviews) - Users frequently experience **integration issues** with Elastic Security, complicating log correlation and overall functionality. (3 reviews) - Learning Curve (3 reviews) - Steep Learning Curve (3 reviews) - Data Management (2 reviews) - Difficult Learning (2 reviews) - High Resource Usage (2 reviews) ## Elastic Security Reviews ### 1. Great Authentication Flexibility, but Anonymous Login Needs Manual Disabling **Rating:** 3.5/5.0 stars **Reviewed by:** Abhishek g. | Devops engineer, Mid-Market (51-1000 emp.) **Reviewed Date:** February 10, 2026 **What do you like best about Elastic Security?** Elastic xpack secqurity is great for connecting with multipule domain controller or various authentication methord **What do you dislike about Elastic Security?** its still have some drawback like anonymous login ,sepratly need to disable otherwise it will be vernable **What problems is Elastic Security solving and how is that benefiting you?** Access control you can have role based access , even you can control fileds level access using kibana role manager ### 2. Its good tool with good interface for SIEM **Rating:** 4.0/5.0 stars **Reviewed by:** Verified User in Information Technology and Services | Mid-Market (51-1000 emp.) **Reviewed Date:** February 11, 2026 **What do you like best about Elastic Security?** EDR Capability and K8 support along with SIEM **What do you dislike about Elastic Security?** Elastic agent issues, some times seems unhealthy or blocking bussiness actions **What problems is Elastic Security solving and how is that benefiting you?** Mainly SIEM for SOC service ### 3. Elastic security review **Rating:** 4.0/5.0 stars **Reviewed by:** Verified User in Telecommunications | Mid-Market (51-1000 emp.) **Reviewed Date:** October 27, 2022 **What do you like best about Elastic Security?** Elastic security provides key analytics of various hosts in a distributed architecture. It helps diagnose any anomalies or threats, allowing you to act fast and minimize potential loss. **What do you dislike about Elastic Security?** It could be pricier, so you might want to choose the appropriate hosts where the threat is more such as those in the edge layer of your network. **What problems is Elastic Security solving and how is that benefiting you?** Elastic security provides quick insights and analytics on the hosts in your network and alerts you in case any action is required to keep your hosts secure. ### 4. I would highly recommend it **Rating:** 4.0/5.0 stars **Reviewed by:** Saravanan K. | Programming Analyst II, Mid-Market (51-1000 emp.) **Reviewed Date:** November 13, 2022 **What do you like best about Elastic Security?** New features and updates. Security in Cloud sharing **What do you dislike about Elastic Security?** No major Cons to report at this moment . **What problems is Elastic Security solving and how is that benefiting you?** Improve cloud security posture ### 5. Very Reliable. Easy set up. Good Security **Rating:** 4.0/5.0 stars **Reviewed by:** Eduardo N. | Technical Support Engineer, Small-Business (50 or fewer emp.) **Reviewed Date:** September 29, 2022 **What do you like best about Elastic Security?** Very reliable software to protect sensitive data. Easy to setup as well! **What do you dislike about Elastic Security?** Nothing really. Occasion loop depending on the network. Sometimes requires a clearing of cache and cookies to workaround the loop **What problems is Elastic Security solving and how is that benefiting you?** Protecting sensitive emails regarding software builds. Conversations internally ### 6. Versatile log processor with ample community support and rapid updates **Rating:** 4.0/5.0 stars **Reviewed by:** Joseph H. | Information Technology Manager, Libraries, Mid-Market (51-1000 emp.) **Reviewed Date:** August 24, 2017 **What do you like best about Elastic Security?** The thing I like the most about logstash is the ability to adjust it to whatever you are doing. If it is your own custom project, or a standard input source it will bend to your needs. **What do you dislike about Elastic Security?** Setting up logstash took a while when I had no idea how to get it working. What I am trying to say is the learning curve was a little higher than I thought. That and GROK is horrible. **Recommendations to others considering Elastic Security:** Learn to use Grok. Find a Grok parser online and then look for a LOT of guides on how to write grok. There are plenty of them out there. When you have found your guide, test out your code. Set up a CI / CD environment, even if it is a simple one to test out your changes to your logstash configuration files. Make sure you setup all your inputs and outputs as separate files, it makes for a LOT easier debugs. Use a version control system like git, it makes finding problems with your configuration changes a LOT easier Basically what I am saying is follow the principals of DevOps, logstash is trouble **What problems is Elastic Security solving and how is that benefiting you?** Analyzing windows and Linux log files for common use, and miss use of computers. Being able to see in one central location how all of the systems and clients are behaving is wonderful. ### 7. Logstash Review **Rating:** 4.0/5.0 stars **Reviewed by:** Verified User in Internet | Mid-Market (51-1000 emp.) **Reviewed Date:** January 18, 2018 **What do you like best about Elastic Security?** It logs the activities from all the servers and aggregates them into one source of truth for visualization and researching. **What do you dislike about Elastic Security?** The logs take a while to understand for non-technical person at the beginning **What problems is Elastic Security solving and how is that benefiting you?** To keep logs and be able to track back to see what activities were performed by what users ### 8. Good open source software **Rating:** 4.0/5.0 stars **Reviewed by:** Verified User in Computer Games | Enterprise (> 1000 emp.) **Reviewed Date:** August 28, 2016 **What do you like best about Elastic Security?** Very good performance when processing and collecting logs big in size. Open source with a big community and a lot of plugins available. **What do you dislike about Elastic Security?** High memory consumption. Somewhat hard to setup. **What problems is Elastic Security solving and how is that benefiting you?** We needed a way to easily find recurring build system problems that are in our hundreds of logs. With the implementation of elk(elastisearch, logstash, kibana) we can now easily search all of our logs at once. - [View Elastic Security pricing details and edition comparison](https://www.g2.com/products/elastic-elastic-security/reviews?filters%5Bnps_score%5D%5B%5D=4§ion=pricing&secure%5Bexpires_at%5D=2026-08-12+11%3A00%3A09+-0500&secure%5Bsession_id%5D=cdca93f3-d6d3-4a3b-acce-f3391f0c3d12&secure%5Btoken%5D=cfeb09be6e67b6ac85635ccdd246366aad6cfc929810d0d14995e8669a038d25&format=llm_user) ## Elastic Security Integrations - [CrowdStrike Falcon Endpoint Protection Platform](https://www.g2.com/products/crowdstrike-falcon-endpoint-protection-platform/reviews) - [Jira Service Management](https://www.g2.com/products/jira-service-management/reviews) - [Microsoft 365](https://www.g2.com/products/microsoft365/reviews) - [Microsoft Defender for Endpoint](https://www.g2.com/products/microsoft-defender-for-endpoint/reviews) - [n8n](https://www.g2.com/products/n8n/reviews) - [SentinelOne Singularity Threat Intelligence](https://www.g2.com/products/sentinelone-singularity-threat-intelligence/reviews) ## Elastic Security Features **Additional Functionality** - Messaging - Enterprise Integration Patterns (EIP) - Enterprise Service Bus (ESB) - AI Copilot - Data Source Connectors - Integrations Management - Generative AI - Enterprise Application Integration - Electronic Data Interchange **Management** - Reporting - Auditing **Detection & Response** - Response Automation - Threat Hunting - Rule-Based Detection - Real-Time Detection - Threat Response **Services - Endpoint Detection & Response (EDR) ** - Managed Services **Additional Functionality** - Generative AI - Event Analysis - Prioritization - AI Copilot - Whitelisting/Blacklisting - Remediation Management - Alerts/Notifications - Behavioral Analytics - Continuous Monitoring - Root Cause Analysis - Endpoint Management - Anomaly/Malware Detection **Cloud Visibility** - Data Discovery - Cloud Registry - Cloud Gap Analytics **Network Management** - Activity Monitoring - Asset Management - Log Management - Network Monitoring - Server Monitoring - File Integrity Monitoring - Real-Time Monitoring - User Management - Endpoint Management - Compliance Management - Incident Management - Vulnerability Management - Policy Management - Event Logs **System Control** - Device Control - Web Control - Application Control - Asset Management - System Isolation **Functionality** - Extraction - Transformation - Loading - Automation - Scalability - Non-Relational Transformations - Data Extraction **Management** - Extensibility - Workflow Automation - Unified Visibility - API **Additional Functionality** - Data Mapping - Monitoring - Charting - Integration Management - Reporting/Analytics - Ad hoc Analysis - Access Controls/Permissions - API - Match & Merge - Real-Time Monitoring - Metadata Management - Pipeline Management - Job Scheduling - Dashboard Creation - Data Storage Management - Multiple Data Sources - Data Import/Export - Generative AI - Data Quality Control - Data Connectors - Customizable Reports - Single Sign On - Version Control - Visual Analytics - Accounting Integration - Real-Time Data - eCommerce Management - AI Copilot - CRM - Data Visualization - SSL Security - Search/Filter - Real-Time Analytics - Data Capture and Transfer - Collaboration Tools - Performance Management - Data Synchronization - Drag & Drop - Data Replication - Activity Dashboard - Database Support - Workflow Management - Alerts/Notifications - Predictive Analytics - Data Migration - Third-Party Integrations - Reporting & Statistics - Data Analysis Tools **Security** - Data Security - Data loss Prevention - Security Auditing - Real-Time Data - Cloud Application Security - SSL Security **Incident Management** - Event Management - Automated Response - Incident Reporting - Real-Time Reporting **Vulnerability Prevention** - Endpoint Intelligence - Firewall - Malware Detection **Analytics** - Threat Intelligence - Artificial Intelligence & Machine Learning - Data Collection **Identity** - SSO - Governance - User Analytics - Real-Time Analytics - Visual Analytics - Reporting/Analytics **Security Intelligence** - Threat Intelligence - Vulnerability Assessment - Behavioral Analytics - Data Examination - Real-Time Data **Security Management** - Incident Reports - Security Validation - Compliance **Agentic AI - Security Information and Event Management (SIEM)** - Autonomous Task Execution - Multi-step Planning - Proactive Assistance - Decision Making **Agentic AI - Extended Detection and Response (XDR) Platforms** - Autonomous Task Execution - Proactive Assistance - Decision Making **Additional Functionality** - Alerts/Notifications - AI Copilot - Access Controls/Permissions - Endpoint Management - Intrusion Detection System - Compliance Management - HIPAA Compliant - Search/Filter - API - Two-Factor Authentication - Data Visualization - Risk Assessment - Real-Time Monitoring - Event Logs - Activity Dashboard - Audit Management - Cloud Security Policy Management - Vulnerability Protection - Anti Virus - Incident Management - Threat Intelligence - Real-Time Reporting - Reporting & Statistics - User Management - Encryption - Vulnerability Scanning - Generative AI - Status Tracking - Third-Party Integrations - Real-Time Notifications - Patch Management - Monitoring - Cloud Encryption **Additional Functionality** - Real-Time Notifications - Audit Trail - Application Security - Risk Analysis - AI Copilot - Data Import/Export - Alerts/Notifications - Prioritization - Security Auditing - Search/Filter - Compliance Tracking - Generative AI - API - Third-Party Integrations - Activity Dashboard - Data Visualization **Services - Extended Detection and Response (XDR)** - Managed Services **Additional Functionality** - Mobile Access - IT Asset Management - Reporting/Analytics - Data Import/Export - Encryption - Remediation Management - Root Cause Analysis - Customization - Workflow Management - Incident Management - User Management - Behavioral Analytics - Ransomware Protection - Activity Dashboard - AI Copilot - Data Security - Authentication - Firewalls - Collaboration Tools - Endpoint Protection - Cloud Application Security - Third-Party Integrations - Access Controls/Permissions - Alerts/Notifications - Data Analysis Tools - Risk Management - Generative AI - Network Scanning - Vulnerability Management - Search/Filter ## Top Elastic Security Alternatives - [Databricks](https://www.g2.com/products/databricks/reviews) - 4.6/5.0 (1,335 reviews) - [CrowdStrike Falcon Endpoint Protection Platform](https://www.g2.com/products/crowdstrike-falcon-endpoint-protection-platform/reviews) - 4.6/5.0 (418 reviews) - [Wiz](https://www.g2.com/products/wiz-wiz/reviews) - 4.7/5.0 (838 reviews)