shouldiuse.io

Categories

VERDICT

Elastic Review

Depends

Should I use Elastic?

Power insights and outcomes with The Elasticsearch Platform. See into your data and find answers that matter. - elastic.co

· 1 month ago

Buy if you run large-scale search, log, or security data and have engineers to operate it. Skip if you need simple search or can't absorb unpredictable usage-based bills.

Confidence

Medium. Based on ~25 public sources. Several results concern unrelated firms named 'Elastic' (a credit line at elastic.com, Elastic Path, sewing elastic) and were excluded.

Ratings

  • Value for money
  • Ease of use
  • Feature depth
  • Support qualityNo support evidence in sources reviewed
  • Security posture

Pricing

Elastic Cloud

Usage-based, no public flat rate

ModelNot disclosed
Monthly feesNot disclosed
HardwareNot disclosed

Best for

  • Large-scale app and site search
  • Log and metrics observability
  • Security teams wanting an open SIEM
  • Organizations with dedicated ops engineers

Not for

  • Small teams needing simple search — massive overkill
  • Anyone expecting open-source pricing after the license change
  • Teams without engineers to tune and scale clusters
  • Startups that can't absorb surprise usage bills

Gotchas - check before you buy

high

Usage-based pricing hides real cost; one Reddit user called getting numbers 'bloody difficult'

high

Misconfigured Elasticsearch clusters have leaked billions of records; harden defaults and auth

medium

License changes mean it's no longer fully open source; OpenSearch forked away

medium

Guess: migrating off later means full reindexing; plan your exit before committing

Pros and cons

Pros

  • Rated 4+ out of 5 across 541 G2 reviews
  • One platform spans search, observability, and security
  • Capterra reviewers call Elasticsearch easy to get started
  • Elastic SIEM is listed by CISA as a federal resource
  • Open detection rules and Security Labs research publicly available

Cons

  • Left open source; license change drove the OpenSearch fork
  • Recent CVE includes arbitrary code execution (CVE-2025-25014)
  • Heavy operational burden; many teams move to lighter engines
  • Costs scale steeply with data volume, per third-party analyses

Sources & method

- 10 sources - Known CVEs exist (info disclosure, DoS, code execution) plus one third-party supply-chain incident; Elastic runs a transparent product-security program.

official x3review x3security x2news x2
  • CVE-2025-25014 — arbitrary code execution, Disclosed May 2025; arbitrary code execution vulnerability in Elastic Kibana.
  • CVE-2022-23712 — denial of service, Denial-of-service vulnerability tracked by NIST for Kibana.
  • CVE-2020-7021 — information disclosure, Information disclosure flaw in Elasticsearch.
  • Salesloft Drift supply-chain incident, Elastic published an official update on its exposure to the Salesloft Drift incident.

Key stats

  • Value for money: 2/5

    Rating

  • Usage-based, no public flat rate

    Starting price

  • 10

    Sources

  • Analyzed

  • Value for money: 2/5. Opaque usage pricing; recurring cost complaints
  • Ease of use: 3/5. Easy to start; operations-heavy at scale
  • Feature depth: 5/5. Search, observability, SIEM, AI in one stack
  • Support quality. No support evidence in sources reviewed
  • Security posture: 3/5. Active CVE stream, but transparent handling; CISA-listed
  • 4+/5 G2 rating 541 seller reviews
  • 31,262 Companies using it tracked by TheirStack
  • 2012 Founded per AWS case study
  • $429.6M Funding per Crunchbase

Pricing

Elastic Cloud

Usage-based, no public flat rate

  • Serverless or classic deployments
  • Pay per resources consumed; scales with data volume

Security

Known CVEs exist (info disclosure, DoS, code execution) plus one third-party supply-chain incident; Elastic runs a transparent product-security program.

  • CVE-2025-25014 — arbitrary code executionDisclosed May 2025; arbitrary code execution vulnerability in Elastic Kibana.⁵
  • CVE-2022-23712 — denial of serviceDenial-of-service vulnerability tracked by NIST for Kibana.
  • CVE-2020-7021 — information disclosureInformation disclosure flaw in Elasticsearch.
  • Salesloft Drift supply-chain incidentElastic published an official update on its exposure to the Salesloft Drift incident.

What users say

G2 reviewers rate Elastic 4+ across 541 reviews and praise its observability and search power, while Reddit threads flag confusing pricing and operational weight.

Full analysis

Based on ~25 public sources. Several results concern unrelated firms named 'Elastic' (a credit line at elastic.com, Elastic Path, sewing elastic) and were excluded.

Enterprise-grade search, observability, and SIEM — powerful but pricey, opaque, and overkill without real data volume.

Methodology

Based on ~25 public sources. Several results concern unrelated firms named 'Elastic' (a credit line at elastic.com, Elastic Path, sewing elastic) and were excluded.

Read how a report is made.

Sources

  1. review
  2. review
  3. official
  4. security
  5. security
  6. official
  7. news
  8. review
  9. news
  10. official

Add this review to your site

This check for Elastic says Depends.

Put the badge on your site.

Visitors see the independent review.

The link points here, and search engines follow it.

This is the badge visitors see on your site.

Paste one snippet. Keep the link as it is. A nofollow tag stops search engines from following it.

Rate this review

Anonymous. You can change your vote.

Loading votes…

Comments

One queue. No nested comments. Give a display name first. Limit: 200 words per comment and 7 comments per day. You can edit or delete yours.

Save a name to write a comment.

0 / 200 words

No comments yet.