G2

Jennifer S.

Senior Cybersecurity Engineer

Small-Business (50 or fewer emp.)

2/10/2026

"Powerful, Customisable Security Platform for Complex Environments"

4.5/5

What do you like best about Elastic Security?

What I like best about Elastic Security is the flexibility and depth it gives across SIEM, endpoint, and observability in a single platform. I can ingest almost any data source, normalize it to ECS, and build detections that actually reflect how our environment works—rather than forcing our workflows to fit a rigid tool. The visibility, correlation, and customisation make it especially powerful for real-world SOC operations and complex environments. Review collected by and hosted on G2.com.

What do you dislike about Elastic Security?

What I dislike about Elastic Security is the learning curve and operational overhead, especially for teams new to the Elastic Stack. Getting the most value requires strong knowledge of ECS, ingest pipelines, and cluster tuning, and some advanced use cases still involve a fair amount of manual configuration. The flexibility is powerful, but it can be overwhelming without experienced resources or good upfront design. Review collected by and hosted on G2.com.

What problems is Elastic Security solving and how is that benefiting you?

Elastic Security solves the problem of fragmented security visibility by bringing SIEM, endpoint, and log analytics into a single, searchable platform. Instead of juggling multiple tools and data silos, I can correlate endpoint, network, and cloud data in real time, build detections that match our actual risk scenarios, and investigate incidents much faster. This directly benefits me by reducing alert fatigue, improving investigation speed, and giving full control over how security data is collected, enriched, and acted upon. Review collected by and hosted on G2.com.