Enterprise Security for the Elastic stack

Search Guard is an Enterprise Security Suite that encrypts and protects your data and data flows in the entire Elastic Stack, including Kibana, Logstash and Beats.


Encryption Community Enterprise Compliance
REST and inter-node encryption
PEM, JKS and PKCS#12 support
TLS1.3 and ECC support
OpenSLL support
Access Control Community Enterprise Compliance
Role-based access control
Cluster-level access control
Index-level access control
Document-level access control
Field-level access control
Field anonymization
Immutable indices
Authentication Community Enterprise Compliance
Internal user management
HTTP Basic authentication
Proxy authentication
PKI authentication
LDAP / Active Directory
Kerberos / SPNEGO
OpenID Connect and JSON web tokens
Custom implementations
Authorization Community Enterprise Compliance
Internal group managemet
Proxy headers
LDAP / Active Directory
JSON web tokens
Audit logging and compliance Community Enterprise Compliance
Security audit logging
Read-access audit logging
Write-access audit logging
Configuration change tracking
Configuration Community Enterprise Compliance
No cluster reboot
REST management API
Configuration GUI
Kibana Community Enterprise Compliance
Kibana access control
Single Sign On
Multi tenancy
Compatibility Community Enterprise Compliance
Elastic Stack compatibility
Cross-cluster search
Cross-cluster replication
Security Certifications Community Enterprise Compliance
CA Veracode Verified

Search Guard is trusted by

What people say

  • “Search Guard met all of our needs and more. Not only have we found open source tools that meet our needs, but we’ve found a partner that’s worked with us through the development of the new platform. They’ve been responsive and engaged every step of the way.”

    Steve Croce, Senior Product Manager and Head of User Experience ObjectRocket
  • “Security is paramount to the protection of our customer’s data. ICHEC chose Search Guard to protect its ELK-Stack environment because of its Single Sign-On authentication integration, access control measures and audit features. The licensing model is also flexible as we continue to grow our services.”

    Tim Murphy, System Administrator Irish Centre for High-End Computing (ICHEC)
  • "Search Guard makes it possible for us to use the ELK-Stack in a productive environment. We chose Search Guard primarily because of the Active Directory and role-permission features. We find their licensing model incredibly helpful, as well as the fact that we are able to use an unlimited amount of nodes."

    Arno Haß, Project Manager Max-Delbrück-Centre for molecular medicine
  • “Security is the prerequisite for every project in the IT industry, especially when it comes to data. HEAnet chooses Search Guard to protect its ELK cluster because it provides node-to-node encryption (TLS) and more features such as multi-tenancy, compliance, unlike its competitors who only provide security on the REST layer.”

    Yasvanth Babu, Middleware System Administrator HEAnet CLG
  •  “We've chose SearchGuard because it matches our values of technical rigour, openness, and auditability. It's enabled us to ensure that data in transit is secure against eavesdropping in off-prem environments, to implement verifiable and granular access to our Elastic clusters, and most importantly to give our analysts access to restricted data sets with confidence that PII remains protected and confidential.”

    Tom Deflect (DDoS protection CDN) & Deflect Labs (DDoS research)
  • "The Steinbuch Centre for Computing at KIT is using Search Guard to secure Elasticsearch instances operated in the World Wide LHC Computing Grid Tier-1 center "GridKa" and in the Large Scale Data Facility. Without fine-grained access control we would be unable to expose Elasticsearch to individual users or use single instances for both private and public data. The multitenancy features for Kibana offered by Search Guard are specially useful, enabling us to also use Kibana for public dashboards."

    Andreas Petzold, Manager Tier-1 Center Karlsruhe Institute of Technology (KIT) Steinbuch Centre for Computing (SCC)
  • "The protection of personal information is very important at the British School of Bucharest. After extensive research we have come to the conclusion that Search Guard, is the best option in order to protect our ELK stack. Being an open source software, with very good documentation and features to help with compliance, including GDPR, we believe Search Guard is a must for any business that wants to stay on top of their IT systems security."

    Alexandru Voinea, IT Manager British School of Bucharest

Get in touch with us

Copyright 2019 floragunn GmbH | Imprint | Data Protection
floragunnEnterprise Security for Elasticsearch