Encryption at Rest for Elasticsearch

Take full control of your data with Encryption at Rest for Elasticsearch indices and snapshots.

Full Data Protection at Rest

Encryption at Rest encrypts all Lucene data files, snapshots, and Elasticsearch translog, ensuring your sensitive information remains secure even when stored on disk in public cloud environments.

Your Keys, Your Control

With Encryption at Rest, encryption keys are held exclusively in secure memory on cluster nodes and never stored on disk, giving you complete authority over data access and enabling secure data destruction through simple key removal. Encryption operates at the core Lucene level of Elasticsearch, making it impossible to circumvent - your data is protected from the inside out

Security Without Compromise

Encryption at Rest integrates effortlessly with OpenSearch while maintaining full compatibility with critical features like vector search and k-NN, providing robust security without sacrificing functionality. As a standalone plugin, Encryption at Rest operates independently of any other plugins, giving you maximum flexibility in your security architecture.

Stay Compliant with Confidence

Meet the stringent requirements of PCI, ISO, SOX, and similar regulations with Encryption at Rest's advanced encryption capabilities, providing the essential documentation and security controls needed for compliance audits.

Meeting Global Security Standards

European Cyber Resilience Act Compliance

Get ahead of the curve with Encryption at Rest's EU Cyber Resilience Act-ready design. Our cutting-edge encryption and authenticated data structures position you for seamless compliance with European regulations – no last-minute scrambling required!

NIST Framework Alignment

Encryption at Rest delivers NIST-aligned protection that security professionals trust. Our encryption technology checks all the right boxes for NIST SP 800-171 compliance, strengthening your security posture with minimal operational overhead.

Easy Implementation for Any Environment

Container-Ready Security

Encryption at Rest installs seamlessly within Docker containers, Kubernetes or on-premise environments, securing your Elasticsearch data with minimal configuration changes to your existing deployment.

Read the documentation

Regulatory Compliance Made Simple

Supercharge your compliance posture with our military-grade encryption. Even if physical storage is compromised, your data remains locked down tight – giving you confidence and peace of mind.

Read the documentation

Available for Linux, Mac and Windows

Encryption at Rest is platform independent and works on Linux, Mac and Windows. Just download and run it.

Read the documentation

Interested? Just contact us!

Thank you for signing up to our newsletter!

Processing

Search Guard is a trademark of floragunn GmbH, registered in the U.S. and in other countries. Elasticsearch, Kibana, Logstash, and Beats are trademarks of Elasticsearch BV, registered in the U.S. and in other countries. Apache and Apache Lucene are trademarks of the Apache Software Foundation in the United States and/or other countries.