Elastic Security

Elastic Security is a SIEM and security analytics product built on the Elastic stack, with an AI Assistant and Attack Discovery. Elastic's own pricing hub, read directly, shows no dollar prices. It describes three billing models: hosted is resource-based, pay as you go monthly or prepaid, serverless is usage-based on the same terms, and self-managed is licence-based on the number of nodes and RAM used. There are Start Free Trial buttons for serverless and hosted, plus Contact Sales. Per-product pages exist for serverless security, hosted and self-managed, which I did not read. So treat dollar figures as third-party estimates.

Those estimates conflict. Several guides list hosted Standard at about $99 a month, Gold at $114, Platinum at $131 and Enterprise at $184. On serverless, one guide lists Security Analytics Essentials at $0.09 per GB ingested and $0.017 per GB retained a month, rising to $0.11 and $0.019 on Complete, where the AI Assistant is included but not on Essentials. Elastic's self-managed page puts Attack Discovery under the Enterprise plan among its native AI capabilities. Several sources say per-endpoint fees no longer apply to Serverless Security as of March 2026, and one notes no public dollar list price on the official Elastic Security pages as of October 24, 2026. Verify before relying on any of this.

Elastic Security suits teams already on Elastic who want SIEM, endpoint and AI in one stack. Compare Splunk, Sumo Logic and Google Security Operations. Browse the Cybersecurity tools directory for more.

SIEM on the Elastic stack

Search-based.

AI-assisted investigation

Attack Discovery.

Free trial?

Yes, hosted and serverless.

Which tier has Attack Discovery?

Enterprise on self-managed.

Per-endpoint fees?

Reportedly dropped on Serverless in March 2026.

Self-managed licensing?

By nodes and RAM.