Elastic Security

Agentic security operations

Also known as
elastic-security

What is Elastic Security?

Next-gen SIEM with AI-driven security analytics for threat detection, investigation, and response. Includes native SOAR workflows and endpoint security capabilities.

Independently observed

What Elastic Security does

The capabilities that matter for siem & soar software, normalised so it lines up with every alternative. “-” means we haven't confirmed it, not that it's missing.

Core
SIEM (log correlation & detection)
SOAR (playbooks / automated response)
Detection
UEBA (behavioural analytics)
-
Built-in threat intelligence
-
ML / anomaly detection
MITRE ATT&CK detection mapping
-
Ops
Case / incident management
-
Pricing
Pricing basis
-
Deployment
Deployment
-
Integration
Connector / content-pack breadth
Cloud-native infrastructure, applications, security activity and context, conten
Licensing
Open-core available
-
Independently observed

Platform & deployment

Independently observed
Platforms
  • Web
Deployment
  • Cloud / SaaS
  • Self-hosted

Integrations (3)

Independently observed
  • AWS
  • Azure
  • Google Cloud

Elastic Security alternatives

Other siem & soar software we track, ranked by the same independent score.

Independent · unbought · dated

The Vioscale score: one lens on the evidence

Not user reviews and not a paid placement: a confidence-weighted blend of the independent signals below (adoption, activity, security posture, and more), which you can sort and re-weight yourself. Vendors can correct their listing but can never move their rank, and stars are weighted low as a vanity metric. It is one way to read the evidence for Elastic Security, not the verdict.

Balanced composite 52 / 100
low · 16%
Signal contributions to the composite score
SignalScoreWeightContributionEvidence
Github Activity630.106.6
Reliability500.105.3
Capabilities580.074.0
Github Stars920.032.7
Integrations170.071.2
Price Level00.050.0-
Release Cadence00.060.0-
Security Posture50.230.0-
Package Downloads00.150.0-
Pricing Transparency00.060.0-
Stackoverflow Activity00.070.0-

Computed . Re-weight it by intent, or see the full method.

All data & sourcesshow ↓

Every value we hold, with its source, retrieval date, and confidence. This is the evidence behind the score: don't trust it, verify it.

Activity

AttributeValueEvidence
Commits last 30d100mediumsource · 2026-07-31 · 65%

Adoption

AttributeValueEvidence
Github stars77,628highsource · 2026-07-31 · 90%

Features

AttributeValueEvidence
Capabilities{"siem":true,"soar":true,"ml_detection":true,"connector_breadth":"Cloud-native infrastructure, applications, security activity and context, conten"}mediumsource · 2026-08-05 · 60%

Integrations

AttributeValueEvidence
Count3mediumsource · 2026-07-31 · 60%

Language

AttributeValueEvidence
PrimaryJavahighsource · 2026-07-31 · 90%

Pricing

AttributeValueEvidence
Modelcommercialmediumsource · 2026-08-05 · 70%

Reliability

AttributeValueEvidence
Status pageYesmediumsource · 2026-08-05 · 60%

Security

AttributeValueEvidence
GdprYeshighsource · 2026-08-05 · 75%