1
Elastic Security:
Unified protection for everyone
James Spiteri
Principal PMM  Elastic Security
2
Forward-Looking Statements
This presentation and the accompanying oral presentation contain forward-looking statements, including statements
concerning plans for future offerings; the expected strength, performance or benefits of our offerings; and our future
operations and expected performance. These forward-looking statements are subject to the safe harbor provisions under the
Private Securities Litigation Reform Act of 1995. Our expectations and beliefs in light of currently available information
regarding these matters may not materialize. Actual outcomes and results may differ materially from those contemplated by
these forward-looking statements due to uncertainties, risks, and changes in circumstances, including, but not limited to those
related to: the impact of the COVID-19 pandemic on our business and our customers and partners; our ability to continue to
deliver and improve our offerings and successfully develop new offerings, including security-related product offerings and
SaaS offerings; customer acceptance and purchase of our existing offerings and new offerings, including the expansion and
adoption of our SaaS offerings; our ability to realize value from investments in the business, including R&D investments; our
ability to maintain and expand our user and customer base; our international expansion strategy; our ability to successfully
execute our go-to-market strategy and expand in our existing markets and into new markets, and our ability to forecast
customer retention and expansion; and general market, political, economic and business conditions.
Additional risks and uncertainties that could cause actual outcomes and results to differ materially are included in our filings
with the Securities and Exchange Commission (the “SEC”), including our Annual Report on Form 10-K for the most recent
fiscal year, our quarterly report on Form 10-Q for the most recent fiscal quarter, and any subsequent reports filed with the
SEC. SEC filings are available on the Investor Relations section of Elastic’s website at ir.elastic.co and the SEC’s website at
www.sec.gov.
Any features or functions of services or products referenced in this presentation, or in any presentations, press releases or
public statements, which are not currently available or not currently available as a general availability release, may not be
delivered on time or at all. The development, release, and timing of any features or functionality described for our products
remains at our sole discretion. Customers who purchase our products and services should make the purchase decisions
based upon services and product features and functions that are currently available.
All statements are made only as of the date of the presentation, and Elastic assumes no obligation to, and does not currently
intend to, update any forward-looking statements or statements relating to features or functions of services or products,
except as required by law.
Enterprise Search Security
Observability
Kibana
Elasticsearch
Beats Logstash
Three solutions powered by one stack
Powered by
the Elastic Stack
3 solutions
Deployed
anywhere Elastic Cloud Elastic Cloud
on Kubernetes
Elastic Cloud
Enterprise
Saas Orchestration
Monitoring
and Compliance
Hunting and
Incident Response
Threat Prevention
and Detection
SIEM & Endpoint
Elastic Security
Eliminate
blind spots
Stop threats
at scale
Arm
every analyst
4
1
Fast & scalable
search engine
3
Rich visualizations &
streamlined workflows
2
Fully operationalized
machine learning
5
Vibrant community
ecosystem
Field-proven
detection library
Elastic Security
differentiation
Elastic
Security
The foundation of
modern security
programs
SIEM, endpoint security,
threat hunting, and more
● Architected for your scale
● Built-in endpoint security
● Unified workflow for triage, investigation, and
response
● Hundreds of expert-developed detections
● Unified and customizable ML
● Drag-and-drop reporting and dashboards
● Backed by Elastic and a global user community
Create
case
Create exception
External
notifications
Timeline templates
Value lists
Endpoint exceptions
Elastic Security 7.11  Operational Workflows
Events,
external alerts,
intelligence
Manage endpoint
security policy
Detection rules
Visualize and
hunt by host
or network
EQL event
correlation
ML,
anomaly
detections
Thresholds,
aggregations
Detection
alerts
Escalate?
Investigate in
Timeline
Timelines
YES
NO
Threat hunting workflows
Rule exceptions
External
systems
Key
System
User process
Backend process
Data store
External action
Decision
Detection
engine
Hosts running
Elastic Agent
with endpoint
security
Servers and
other hosts
Cloud
infrastructure
and apps
Network
monitoring
Firewalls and
IDS/IPS
Web proxies
APM
More data
sources...
YES
Enroll and
manage fleet
Alerting workflows
KQL,
Lucene
queries
Indicator
match
9
Demo
Take a quick spin
demo.elastic.co
Join the
Elastic
community Try free on Cloud:
ela.st/security-trial
Connect on Slack:
ela.st/slack
11
Thank you!

Elastic Security: Unified protection for everyone

  • 1.
    1 Elastic Security: Unified protectionfor everyone James Spiteri Principal PMM  Elastic Security
  • 2.
    2 Forward-Looking Statements This presentationand the accompanying oral presentation contain forward-looking statements, including statements concerning plans for future offerings; the expected strength, performance or benefits of our offerings; and our future operations and expected performance. These forward-looking statements are subject to the safe harbor provisions under the Private Securities Litigation Reform Act of 1995. Our expectations and beliefs in light of currently available information regarding these matters may not materialize. Actual outcomes and results may differ materially from those contemplated by these forward-looking statements due to uncertainties, risks, and changes in circumstances, including, but not limited to those related to: the impact of the COVID-19 pandemic on our business and our customers and partners; our ability to continue to deliver and improve our offerings and successfully develop new offerings, including security-related product offerings and SaaS offerings; customer acceptance and purchase of our existing offerings and new offerings, including the expansion and adoption of our SaaS offerings; our ability to realize value from investments in the business, including R&D investments; our ability to maintain and expand our user and customer base; our international expansion strategy; our ability to successfully execute our go-to-market strategy and expand in our existing markets and into new markets, and our ability to forecast customer retention and expansion; and general market, political, economic and business conditions. Additional risks and uncertainties that could cause actual outcomes and results to differ materially are included in our filings with the Securities and Exchange Commission (the “SEC”), including our Annual Report on Form 10-K for the most recent fiscal year, our quarterly report on Form 10-Q for the most recent fiscal quarter, and any subsequent reports filed with the SEC. SEC filings are available on the Investor Relations section of Elastic’s website at ir.elastic.co and the SEC’s website at www.sec.gov. Any features or functions of services or products referenced in this presentation, or in any presentations, press releases or public statements, which are not currently available or not currently available as a general availability release, may not be delivered on time or at all. The development, release, and timing of any features or functionality described for our products remains at our sole discretion. Customers who purchase our products and services should make the purchase decisions based upon services and product features and functions that are currently available. All statements are made only as of the date of the presentation, and Elastic assumes no obligation to, and does not currently intend to, update any forward-looking statements or statements relating to features or functions of services or products, except as required by law.
  • 3.
    Enterprise Search Security Observability Kibana Elasticsearch BeatsLogstash Three solutions powered by one stack Powered by the Elastic Stack 3 solutions Deployed anywhere Elastic Cloud Elastic Cloud on Kubernetes Elastic Cloud Enterprise Saas Orchestration
  • 4.
    Monitoring and Compliance Hunting and IncidentResponse Threat Prevention and Detection SIEM & Endpoint Elastic Security
  • 5.
  • 6.
    4 1 Fast & scalable searchengine 3 Rich visualizations & streamlined workflows 2 Fully operationalized machine learning 5 Vibrant community ecosystem Field-proven detection library Elastic Security differentiation
  • 7.
    Elastic Security The foundation of modernsecurity programs SIEM, endpoint security, threat hunting, and more ● Architected for your scale ● Built-in endpoint security ● Unified workflow for triage, investigation, and response ● Hundreds of expert-developed detections ● Unified and customizable ML ● Drag-and-drop reporting and dashboards ● Backed by Elastic and a global user community
  • 8.
    Create case Create exception External notifications Timeline templates Valuelists Endpoint exceptions Elastic Security 7.11  Operational Workflows Events, external alerts, intelligence Manage endpoint security policy Detection rules Visualize and hunt by host or network EQL event correlation ML, anomaly detections Thresholds, aggregations Detection alerts Escalate? Investigate in Timeline Timelines YES NO Threat hunting workflows Rule exceptions External systems Key System User process Backend process Data store External action Decision Detection engine Hosts running Elastic Agent with endpoint security Servers and other hosts Cloud infrastructure and apps Network monitoring Firewalls and IDS/IPS Web proxies APM More data sources... YES Enroll and manage fleet Alerting workflows KQL, Lucene queries Indicator match
  • 9.
  • 10.
    Take a quickspin demo.elastic.co Join the Elastic community Try free on Cloud: ela.st/security-trial Connect on Slack: ela.st/slack
  • 11.