cyber.hendryadrian.com
Security News · elastic.co

Elastic Workflows 9.4 Reaches General Availability With Security Automation Features

· Original article ↗

Summary

Elastic says Workflows is generally available in 9.4, adding 25 case-management steps, human approval checkpoints, AI-assisted YAML authoring, reusable workflows, event-driven triggers, execution history, and execution-based pricing.

Key points

  • Elastic Workflows moves from Tech Preview to general availability in version 9.4.
  • The release adds 25 typed, validated case-management steps for actions including creating, assigning, updating, and closing cases.
  • The waitForInput step pauses automation for analyst review and approval before a workflow proceeds.
  • Natural-language workflow authoring is in Tech Preview; the AI assistant generates editable YAML.
  • The workflow.execute step supports reusable workflows, while new flow controls include while, switch, loop.break, and loop.continue.
  • Production controls include failure handling, concurrency limits, execution history, granular RBAC, and security audit logging.
  • Elastic says execution-based pricing applies across deployment types; Serverless pricing began May 1, 2026, while Hosted and self-managed deployments are in a promotional period.

Article Details

Event Type
Product release: Elastic Workflows 9.4 reached general availability.
Impact
Elastic Workflows adds production-ready automation for Security, Observability, and Search, including expanded case-management steps, human review checkpoints, AI-assisted workflow authoring, composable workflows, and reliability and audit controls. The release also introduces execution-based pricing, with timing and applicability varying by deployment type.

Vendors

ElasticElastic 9.4 delivers Elastic Workflows as a production-ready, built-in automation layer for Security, Observability, and Search with expanded case management, human-in-the-loop primitives, AI integration, and composable

Products

Agent BuilderThe release also introduces event-driven triggers, execution-based pricing for Enterprise/Complete tiers, and integrations like Agent Builder and VirusTotal to streamline triage and investigations.Elastic WorkflowsElastic 9.4 delivers Elastic Workflows as a production-ready, built-in automation layer for Security, Observability, and Search with expanded case management, human-in-the-loop primitives, AI integration, and composable

Related Articles