Elastic (NYSE: ESTC), the Search AI Company, has launched Elastic AI SOC Engine (EASE), a new serverless security package designed to integrate AI-driven context-aware detection and triage capabilities into existing SIEM and EDR tools without requiring immediate migration.
EASE aims to address challenges faced by Security Operations Centers (SOCs) by providing AI-driven alert correlation, including Elastic’s Attack Discovery, and an AI Assistant to help analysts identify coordinated threats and reduce manual investigation time. Delivered on the Elastic Cloud, EASE offers a path for security teams to prioritize threats, mitigate alert fatigue, and enhance the value of their current security investments.
Santosh Krishnan, general manager of Observability & Security at Elastic, stated, “EASE integrates Elastic’s AI capabilities into the security tools teams currently utilize, automatically prioritizing threats, correlating alerts, and accelerating investigations, thereby reducing the workload on teams. This allows for a seamless transition to Elastic Security’s unified, AI-driven platform when organizations are prepared for a full migration, encompassing SIEM, XDR, and cloud security.”
EASE is engineered for rapid deployment and immediate impact within security environments that use platforms such as Splunk, Microsoft Sentinel, and CrowdStrike. Its features include:
Agentless integrations: Native ingestion of alerts from third-party SIEM and EDR platforms for immediate AI analysis.
AI-powered alert correlation: Access to Elastic Attack Discovery, which triages, correlates, and prioritizes alerts, alongside an AI-powered alert view for summaries and context.
Context-aware AI Assistant: Agentless data connectors that enrich investigations with internal knowledge from sources like Jira, GitHub, and SharePoint, supporting natural language queries and RAG-based search across organizational data.
Transparent AI with model flexibility: Organizations can select their preferred LLM, including their own or the Elastic Managed LLM, with cited AI Assistant responses and full logging/tracking of queries, responses, and token usage.
Operational dashboards: Pre-built metrics to demonstrate time savings, detection improvements, and return on investment for security teams.
Michelle Abraham, senior research director, Security and Trust, IDC, commented, “Elastic is addressing a common challenge: how to integrate open and transparent AI into the SOC without necessitating a complete overhaul. EASE assists teams with faster detection and investigation by leveraging their existing tools.”
Elastic, the Search AI Company, integrates search technology with artificial intelligence to convert data into insights. The Elastic Search AI Platform forms the foundation for its search, observability, and security solutions, utilized by thousands of companies globally.
