---
title: Elastic Security feature tiers
description: Elastic Security Serverless projects are available in the following tiers, each with a carefully selected set of features to enable security operations:...
url: https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/4067/solutions/security/security-serverless-feature-tiers
products:
  - Elastic Security
---

# Elastic Security feature tiers
Elastic Security Serverless projects are available in the following tiers, each with a carefully selected set of features to enable security operations:
- **Elastic AI SOC Engine (EASE)**: Use Elastic's AI-powered threat hunting and alert triage capabilities to complement a third-party SIEM deployment.
- **Security Analytics Essentials**: Everything most organizations need to operationalize traditional SIEM.
- **Security Analytics Complete**: All the capabilities included in **Security Analytics Essentials**, plus additional features that provide a more complete toolset.

Both of the **Security Analytics** tiers have **Add-on options** for endpoint protection and cloud protection.
Refer to the [feature comparison table](#sec-subscription-features) for a more detailed comparison between the tiers.

## Feature tier pricing

For pricing information, refer to [Elastic Security Serverless pricing](https://www.elastic.co/pricing/serverless-security).

## Security Analytics feature comparison

The following table compares features available in each feature tier:

| **Feature Name**Feature Name                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         | **Security Analytics Complete**Security Analytics Complete | **Security Analytics Essentials**Security Analytics Essentials | **EASE**EASE |
|--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|------------------------------------------------------------|----------------------------------------------------------------|--------------|
| **[Cases](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/4067/solutions/security/investigate/cases) (collect and share information)**[Cases](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/4067/solutions/security/investigate/cases)Cases (collect and share information)                                                                                                                                                                                                                                                                                                                                                                            | ✅                                                          | ✅                                                              | ✅            |
| **Collaboration workflows**Collaboration workflows                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                   | ✅                                                          | ✅                                                              | ✅            |
| **[Native integrations](https://www.elastic.co/docs/reference/integrations) with third-party SIEM and EDR platforms**[Native integrations](https://www.elastic.co/docs/reference/integrations)Native integrations with third-party SIEM and EDR platforms                                                                                                                                                                                                                                                                                                                                                                                                                            | ✅                                                          | ✅                                                              | ✅            |
| **Out of the box [dashboards](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/4067/solutions/security/dashboards)**Out of the box [dashboards](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/4067/solutions/security/dashboards)dashboards                                                                                                                                                                                                                                                                                                                                                                                                             | ✅                                                          | ✅                                                              | ❌            |
| **Prebuilt and custom [detection rules](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/4067/solutions/security/detect-and-alert)**Prebuilt and custom [detection rules](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/4067/solutions/security/detect-and-alert)detection rules                                                                                                                                                                                                                                                                                                                                                                        | ✅                                                          | ✅                                                              | ❌            |
| **[Machine learning](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/4067/solutions/security/advanced-entity-analytics/anomaly-detection)**[Machine learning](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/4067/solutions/security/advanced-entity-analytics/anomaly-detection)Machine learning                                                                                                                                                                                                                                                                                                                                                       | ✅                                                          | ✅                                                              | ❌            |
| **[Triage](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/4067/solutions/security/detect-and-alert/manage-detection-alerts), [investigation](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/4067/solutions/security/investigate), and [hunting](https://www.elastic.co/security/threat-hunting)**[Triage](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/4067/solutions/security/detect-and-alert/manage-detection-alerts)Triage, [investigation](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/4067/solutions/security/investigate)investigation, and [hunting](https://www.elastic.co/security/threat-hunting)hunting | ✅                                                          | ✅                                                              | ❌            |
| **[Threat intelligence integration](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/4067/solutions/security/get-started/enable-threat-intelligence-integrations)**[Threat intelligence integration](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/4067/solutions/security/get-started/enable-threat-intelligence-integrations)Threat intelligence integration                                                                                                                                                                                                                                                                                          | ✅                                                          | ✅                                                              | ❌            |
| **[AI Assistant](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/4067/solutions/security/ai/ai-assistant) with custom knowledge support**[AI Assistant](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/4067/solutions/security/ai/ai-assistant)AI Assistant with custom knowledge support                                                                                                                                                                                                                                                                                                                                                               | ✅                                                          | ❌                                                              | ✅            |
| **[Attack Discovery](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/4067/solutions/security/ai/attack-discovery) (AI-powered alert correlation)**[Attack Discovery](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/4067/solutions/security/ai/attack-discovery)Attack Discovery (AI-powered alert correlation)                                                                                                                                                                                                                                                                                                                                         | ✅                                                          | ❌                                                              | ✅            |
| **[Automatic Import](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/4067/solutions/security/get-started/automatic-import) (AI-powered custom integrations)**[Automatic Import](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/4067/solutions/security/get-started/automatic-import)Automatic Import (AI-powered custom integrations)                                                                                                                                                                                                                                                                                                                   | ✅                                                          | ❌                                                              | ❌            |
| **[Entity analytics / UEBA](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/4067/solutions/security/advanced-entity-analytics)**[Entity analytics / UEBA](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/4067/solutions/security/advanced-entity-analytics)Entity analytics / UEBA                                                                                                                                                                                                                                                                                                                                                                      | ✅                                                          | ❌                                                              | ❌            |
| **Extended security content**Extended security content                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               | ✅                                                          | ❌                                                              | ❌            |
| **Threat intelligence management**Threat intelligence management                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     | ✅                                                          | ❌                                                              | ❌            |


## Add-on options

Both the **Security Analytics Complete** and **Security Analytics Essentials** feature tiers optional add-ons for **Endpoint protection** and **Cloud protection**. The features included in each add on vary by feature tier, as follows:
**Endpoint protection add-on:**

| Feature Name                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  | Complete | Essentials |
|---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|----------|------------|
| **[Malware prevention](/elastic/docs-content/pull/4067/solutions/security/configure-elastic-defend/configure-an-integration-policy-for-elastic-defend#malware-protection)**[Malware prevention](/elastic/docs-content/pull/4067/solutions/security/configure-elastic-defend/configure-an-integration-policy-for-elastic-defend#malware-protection)Malware prevention                                                                                                                                                                                                                                                                                                                                          | ✅        | ✅          |
| **[Ransomware protection](/elastic/docs-content/pull/4067/solutions/security/configure-elastic-defend/configure-an-integration-policy-for-elastic-defend#ransomware-protection)**[Ransomware protection](/elastic/docs-content/pull/4067/solutions/security/configure-elastic-defend/configure-an-integration-policy-for-elastic-defend#ransomware-protection)Ransomware protection                                                                                                                                                                                                                                                                                                                           | ✅        | ✅          |
| **[Memory](/elastic/docs-content/pull/4067/solutions/security/configure-elastic-defend/configure-an-integration-policy-for-elastic-defend#memory-protection) and [behavior prevention](/elastic/docs-content/pull/4067/solutions/security/configure-elastic-defend/configure-an-integration-policy-for-elastic-defend#behavior-protection)**[Memory](/elastic/docs-content/pull/4067/solutions/security/configure-elastic-defend/configure-an-integration-policy-for-elastic-defend#memory-protection)Memory and [behavior prevention](/elastic/docs-content/pull/4067/solutions/security/configure-elastic-defend/configure-an-integration-policy-for-elastic-defend#behavior-protection)behavior prevention | ✅        | ✅          |
| **[Endpoint response actions](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/4067/solutions/security/endpoint-response-actions)**[Endpoint response actions](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/4067/solutions/security/endpoint-response-actions)Endpoint response actions                                                                                                                                                                                                                                                                                                                                                                                         | ✅        | ❌          |
| **Advanced [endpoint policy management](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/4067/solutions/security/manage-elastic-defend/endpoints)**Advanced [endpoint policy management](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/4067/solutions/security/manage-elastic-defend/endpoints)endpoint policy management                                                                                                                                                                                                                                                                                                                                                        | ✅        | ❌          |

**Cloud protection add-on:**

| Feature Name                                                                                                                                                                                                                                                                                                                                                                                                                              | Complete | Essentials |
|-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|----------|------------|
| **[Workload runtime protection](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/4067/solutions/security/cloud/cloud-workload-protection-for-vms)**[Workload runtime protection](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/4067/solutions/security/cloud/cloud-workload-protection-for-vms)Workload runtime protection                                                                                   | ✅        | ✅          |
| **[Cloud native posture management](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/4067/solutions/security/cloud/security-posture-management-overview) for Kubernetes, AWS, GCP & more**[Cloud native posture management](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/4067/solutions/security/cloud/security-posture-management-overview)Cloud native posture management for Kubernetes, AWS, GCP & more | ✅        | ✅          |
| **[Response actions](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/4067/solutions/security/endpoint-response-actions)**[Response actions](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/4067/solutions/security/endpoint-response-actions)Response actions                                                                                                                                                | ✅        | ❌          |


## Upgrade to a higher feature tier

<warning>
  Upgrading a project to a higher feature tier is permanent.
</warning>

To access the additional features available in a higher feature tier:
1. From the [Elastic Cloud Console](https://cloud.elastic.co), select **Manage** next to the Serverless project you want to upgrade.
2. Next to **Project features**, select **Edit**.
3. Select your desired feature tier.
4. Select **Save** to complete the upgrade.