Enterprise Security for Elasticsearch and Kibana

Search Guard is an Enterprise Security Suite for Elasticsearch that encrypts and protects your data in the entire Elastic Stack, including Kibana, Logstash and Beats.

certificate icon

Certified Security for Elasticsearch

Search Guard puts Security for Elasticsearch first. Our code is rigorously tested and verified by industry leaders like CA Veracode and NCC. We are committed to creating truly secure software for Elasticsearch since 2013 when no security solution for the Elastic Stack existed.
shield icon

Support for Elasticsearch and Search Guard

Besides our Community Forum we offer priority Elasticsearch and Search Guard support to our costumers with guaranteed SLAs and direct access to the Search Guard developer team. Custom support plans, including follow-the-sun and Elastic Stack support plans are available.
checkmark icon

Trusted by Fortune 500 companies

Search Guard for Elasticsearch is used in production environments by Fortune 500 companies around the globe. Including the federal sector, finance and healthcare companies, Telco providers and innovative start-ups.
Features
feature
free community editionenterprise editionCompliance edition
TLS Encryption
REST encryption
checkmark iconcheckmark iconcheckmark icon
Inter-node encryption
checkmark iconcheckmark iconcheckmark icon
PEM and JKS support
checkmark iconcheckmark iconcheckmark icon
Access control
Role-based access control
checkmark iconcheckmark iconcheckmark icon
Cluster-level access control
checkmark iconcheckmark iconcheckmark icon
Index-level access control
checkmark iconcheckmark iconcheckmark icon
Document-level access control
checkmark iconcheckmark icon
Field-level access control
checkmark iconcheckmark icon
Field anonymization
checkmark icon
Immutable indices
checkmark icon
Authentication
Internal user management
checkmark iconcheckmark iconcheckmark icon
HTTP Basic authentication
checkmark iconcheckmark iconcheckmark icon
PKI authentication
checkmark iconcheckmark iconcheckmark icon
Proxy authentication
checkmark iconcheckmark iconcheckmark icon
LDAP / Active Directory
checkmark iconcheckmark icon
Kerberos / SPNEGO
checkmark iconcheckmark icon
JSON web tokens
checkmark iconcheckmark icon
OpenID Connect
checkmark iconcheckmark icon
SAML
checkmark iconcheckmark icon
Custom implementations
checkmark iconcheckmark icon
Authorization
Internal group managemet
checkmark iconcheckmark iconcheckmark icon
Proxy headers
checkmark iconcheckmark iconcheckmark icon
LDAP / Active Directory
checkmark iconcheckmark icon
JSON web tokens
checkmark iconcheckmark icon
SAML
checkmark iconcheckmark icon
Audit logging and compliance
Security audit logging
checkmark iconcheckmark icon
Read-access audit logging
checkmark icon
Write-access audit logging
checkmark icon
Configuration change tracking
checkmark icon
Alerting
Elasticsearch data sources
checkmark iconcheckmark iconcheckmark icon
External HTTP data sources
checkmark iconcheckmark iconcheckmark icon
Escalation levels
checkmark iconcheckmark iconcheckmark icon
Throttling and Acknowledgement
checkmark iconcheckmark iconcheckmark icon
Email, Slack and Webhook actions
checkmark iconcheckmark iconcheckmark icon
PagerDuty actions
checkmark iconcheckmark icon
JIRA actions
checkmark iconcheckmark icon
Configuration
REST management API
checkmark iconcheckmark icon
Configuration GUI
checkmark iconcheckmark icon
Kibana
Kibana access control
checkmark iconcheckmark iconcheckmark icon
Single Sign On
checkmark iconcheckmark icon
Multi tenancy
checkmark iconcheckmark icon
Compatibility
Kibana, logstash and beats
checkmark iconcheckmark iconcheckmark icon
Cross-cluster search
checkmark iconcheckmark iconcheckmark icon
Cross-cluster replication
checkmark iconcheckmark iconcheckmark icon
Elastic Stack Monitoring
checkmark iconcheckmark iconcheckmark icon
Community Edition
TLS Encryption
REST encryption
Inter-node encryption
PEM and JKS support
Access control
Role-based access control
Cluster-level access control
Index-level access control
Authentication
Internal user management
HTTP Basic authentication
PKI authentication
Proxy authentication
Authorization
Internal group managemet
Proxy headers
Audit logging and compliance
Alerting
Elasticsearch data sources
External HTTP data sources
Escalation levels
Throttling and Acknowledgement
Email, Slack and Webhook actions
Configuration
Kibana
Kibana access control
Compatibility
Kibana, logstash and beats
Cross-cluster search
Cross-cluster replication
Elastic Stack Monitoring
Enterprise Edition
TLS Encryption
REST encryption
Inter-node encryption
PEM and JKS support
Access control
Role-based access control
Cluster-level access control
Index-level access control
Document-level access control
Field-level access control
Authentication
Internal user management
HTTP Basic authentication
PKI authentication
Proxy authentication
LDAP / Active Directory
Kerberos / SPNEGO
JSON web tokens
OpenID Connect
SAML
Custom implementations
Authorization
Internal group managemet
Proxy headers
LDAP / Active Directory
JSON web tokens
SAML
Audit logging and compliance
Security audit logging
Alerting
Elasticsearch data sources
External HTTP data sources
Escalation levels
Throttling and Acknowledgement
Email, Slack and Webhook actions
PagerDuty actions
JIRA actions
Configuration
REST management API
Configuration GUI
Kibana
Kibana access control
Single Sign On
Multi tenancy
Compatibility
Kibana, logstash and beats
Cross-cluster search
Cross-cluster replication
Elastic Stack Monitoring
Compliance Edition
TLS Encryption
REST encryption
Inter-node encryption
PEM and JKS support
Access control
Role-based access control
Cluster-level access control
Index-level access control
Document-level access control
Field-level access control
Field anonymization
Immutable indices
Authentication
Internal user management
HTTP Basic authentication
PKI authentication
Proxy authentication
LDAP / Active Directory
Kerberos / SPNEGO
JSON web tokens
OpenID Connect
SAML
Custom implementations
Authorization
Internal group managemet
Proxy headers
LDAP / Active Directory
JSON web tokens
SAML
Audit logging and compliance
Security audit logging
Read-access audit logging
Write-access audit logging
Configuration change tracking
Alerting
Elasticsearch data sources
External HTTP data sources
Escalation levels
Throttling and Acknowledgement
Email, Slack and Webhook actions
PagerDuty actions
JIRA actions
Configuration
REST management API
Configuration GUI
Kibana
Kibana access control
Single Sign On
Multi tenancy
Compatibility
Kibana, logstash and beats
Cross-cluster search
Cross-cluster replication
Elastic Stack Monitoring

Search Guard is trusted by

Licensing models
Unlimited nodes - Scale your cluster, not your cost!
standard editions
academic & custom
community icon

Community Edition for Elasticsearch

TLS encryption on REST and transport
Role-based access control to indices
Fully featured Alerting module
Integrated with the entire Elastic Stack
enterprise icon

Enterprise Edition for Elasticsearch

Integrates with all major security standards
Document- and Field-Level security controls
Audit Logging
Professional management API and Kibana multitenancy
compliance icon

Compliance Edition for Elasticsearch

Designed for meeting compliance regulations
Field anonymization
Record read and write access to data
Monitor integrity of Elasticsearch installation
We offer an
Academic & Scientific License
, as well as
Custom Licenses
for your personal needs.
Free Trial

Free Trial

Want to see how your company can benefit from our Compliance edition? Sign up to our 60-day trial, completely free of charge.

Search Guard Headquarters

floragunn GmbH
Tempelhofer Ufer 16
10963 Berlin
Germnay

Authorized Partners

USA and Canada
Excelerate Systems LLC
2205 152nd Avenue NE Redmond
WA 98052
david.bennett@exceleratesystems.net

France & North Africa
Ian Quakenbos
iquackenbos@search-guard.com

South America
Excelerate Systems S de R.L. de C.V.
Córdoba 42, Roma Norte, Cuauhtémoc, C.P.
06700, Ciudad de México
victor.pichardo@exceleratesystems.net

contact information
(Fields marked with an (*) are required)
your message
newsletter
This form collects your name and email. Please take a look in our privacy policy for a better understanding on how we protect and manage your submitted data.