Elastic Security

Score8.4 out of 10

13 Reviews and Ratings

What is Elastic Security?

Elastic Security equips analysts to prevent, detect, and respond to threats. The free and open solution delivers SIEM, endpoint security, threat hunting, and cloud monitoring. The solution encompasses Elastic SIEM, which brings Elasticsearch to SIEM and threat hunting. The Elastic Agent (or Elastic Endpoint Security based on the former Endgame security product acquired by Elastic in late 2019) brings signatureless malware prevention to endpoints, as well as security data collection for analytics.

Categories & Use Cases

Verified User

Professional in Information Technology (10,001+ employees employees)

Pros

Identify 0-day malware.
Provides a few forensic details on endpoints.
Very easy to administer.

Cons

I would love that it provided more memory analysis details.
Being able to edit sensor profiles after creating them.
I would love it if it provided more automation features.

Return on Investment

Being able to identify threats we couldn't identify before.
Easier management of endpoints.
Being able to immediately isolate endpoints remotely that have high severity threats.

Alternatives Considered

Cybereason Endpoint Detection & Response (EDR) and CrowdStrike Falcon Endpoint Protection

Other Software Used

Cisco Advanced Malware Protection (AMP) for Endpoints, McAfee Endpoint Security, Symantec Client Management Suite