Elastic Announces Nine Security Integrations for Q1 2026
Summary
Elastic announced nine security integrations with prebuilt ingest pipelines and dashboards, adding visibility across macOS, SIEM, email, cloud, identity, browser, and data-security sources.
Key points
- Elastic says all nine integrations include ingest pipelines and prebuilt dashboards, with data available to its search, detection, and investigation capabilities.
- macOS Security Events filters unified logs for security-relevant authentication, process, network, file, and configuration activity.
- The IBM QRadar integration ingests offense records; Elastic’s migration workflow uses semantic search and generative AI to map rules to detections or translate them to ES|QL.
- Proofpoint Essentials streams blocked and permitted malicious-URL clicks and messages blocked or delivered despite threats.
- AWS Security Hub findings are ingested in OCSF format and normalized to ECS for correlation with other security signals.
- Other integrations cover asset intelligence, application allowlisting, browser security, phishing detection, and data-security posture findings.
Article Details
- Event Type
- Elastic announced nine new security integrations.
- Impact
- The integrations add normalized security data and prebuilt dashboards for macOS, SIEM, email, cloud, asset intelligence, application allowlisting, browser security, phishing detection, and data security posture management. They make findings and telemetry searchable in Elastic Security for cross-source correlation, investigation, detection, and response.
Vendors
Airlock DigitalmacOS Security Events, IBM QRadar migration, Proofpoint Essentials, AWS Security Hub, JupiterOne, Airlock Digital, Island Browser, Ironscales, and Cyera with ECS/OCSF normalization and built-in support for ES|QL,Amazon Web ServicesHighlights include macOS Security Events, IBM QRadar migration, Proofpoint Essentials, AWS Security Hub, JupiterOne, Airlock Digital, Island Browser, Ironscales, and Cyera with ECS/OCSF normalization and built-inCyeraProofpoint Essentials, AWS Security Hub, JupiterOne, Airlock Digital, Island Browser, Ironscales, and Cyera with ECS/OCSF normalization and built-in support for ES|QL, Attack Discovery and the AI Assistant.ElasticElastic announced nine new Elastic Security integrations that expand visibility and normalization across macOS, cloud services, email protection, identity and SIEM platforms, each shipping with ingest pipelines andIBMHighlights include macOS Security Events, IBM QRadar migration, Proofpoint Essentials, AWS Security Hub, JupiterOne, Airlock Digital, Island Browser, Ironscales, and Cyera with ECS/OCSF normalization and built-inIRONSCALESQRadar migration, Proofpoint Essentials, AWS Security Hub, JupiterOne, Airlock Digital, Island Browser, Ironscales, and Cyera with ECS/OCSF normalization and built-in support for ES|QL, Attack Discovery and the AIIslandEvents, IBM QRadar migration, Proofpoint Essentials, AWS Security Hub, JupiterOne, Airlock Digital, Island Browser, Ironscales, and Cyera with ECS/OCSF normalization and built-in support for ES|QL, AttackJupiterOneHighlights include macOS Security Events, IBM QRadar migration, Proofpoint Essentials, AWS Security Hub, JupiterOne, Airlock Digital, Island Browser, Ironscales, and Cyera with ECS/OCSF normalization and built-inProofpointHighlights include macOS Security Events, IBM QRadar migration, Proofpoint Essentials, AWS Security Hub, JupiterOne, Airlock Digital, Island Browser, Ironscales, and Cyera with ECS/OCSF normalization and built-in
Products
Airlock DigitalmacOS Security Events, IBM QRadar migration, Proofpoint Essentials, AWS Security Hub, JupiterOne, Airlock Digital, Island Browser, Ironscales, and Cyera with ECS/OCSF normalization and built-in support for ES|QL,AWS Security HubHighlights include macOS Security Events, IBM QRadar migration, Proofpoint Essentials, AWS Security Hub, JupiterOne, Airlock Digital, Island Browser, Ironscales, and Cyera with ECS/OCSF normalization and built-inCyeraProofpoint Essentials, AWS Security Hub, JupiterOne, Airlock Digital, Island Browser, Ironscales, and Cyera with ECS/OCSF normalization and built-in support for ES|QL, Attack Discovery and the AI Assistant.Elastic DefendmacOS Security Events complements Elastic Defend by ingesting filtered, security-relevant macOS telemetry (authentication, process execution, network, file system, configuration) using predicate-based filters to reduceElastic SecurityElastic announced nine new Elastic Security integrations that expand visibility and normalization across macOS, cloud services, email protection, identity and SIEM platforms, each shipping with ingest pipelines andIBM QRadarHighlights include macOS Security Events, IBM QRadar migration, Proofpoint Essentials, AWS Security Hub, JupiterOne, Airlock Digital, Island Browser, Ironscales, and Cyera with ECS/OCSF normalization and built-inIronscalesQRadar migration, Proofpoint Essentials, AWS Security Hub, JupiterOne, Airlock Digital, Island Browser, Ironscales, and Cyera with ECS/OCSF normalization and built-in support for ES|QL, Attack Discovery and the AIIsland BrowserEvents, IBM QRadar migration, Proofpoint Essentials, AWS Security Hub, JupiterOne, Airlock Digital, Island Browser, Ironscales, and Cyera with ECS/OCSF normalization and built-in support for ES|QL, Attack DiscoveryJupiterOneHighlights include macOS Security Events, IBM QRadar migration, Proofpoint Essentials, AWS Security Hub, JupiterOne, Airlock Digital, Island Browser, Ironscales, and Cyera with ECS/OCSF normalization and built-inmacOS Security EventsHighlights include macOS Security Events, IBM QRadar migration, Proofpoint Essentials, AWS Security Hub, JupiterOne, Airlock Digital, Island Browser, Ironscales, and Cyera with ECS/OCSF normalization and built-inProofpoint EssentialsHighlights include macOS Security Events, IBM QRadar migration, Proofpoint Essentials, AWS Security Hub, JupiterOne, Airlock Digital, Island Browser, Ironscales, and Cyera with ECS/OCSF normalization and built-in