# OpenSearch® vs Elasticsearch Part 1: Security – Why OpenSearch is the Better Value [Blog](/blog/)>[Technology](/blog/category/technical/)>OpenSearch® vs Elasticsearch Part 1: Security – Why OpenSearch is the Better Value OpenSearch® vs Elasticsearch Part 1: Security – Why OpenSearch is the Better Value ================================================================================== August 14, 2024 | By [ Alex Bunday](https://www.instaclustr.com/blog/author/abunday/) [ ](https://x.com/intent/tweet?text=OpenSearch%C2%AE%20vs%20Elasticsearch%20Part%201:%20Security%20%E2%80%93%20Why%20OpenSearch%20is%20the%20Better%20Value&url=https://www.instaclustr.com/blog/opensearch-vs-elasticsearch-part-1-security/) [ ](https://www.linkedin.com/shareArticle?mini=true&url=https://www.instaclustr.com/blog/opensearch-vs-elasticsearch-part-1-security/&title=&summary=OpenSearch%C2%AE%20vs%20Elasticsearch%20Part%201:%20Security%20%E2%80%93%20Why%20OpenSearch%20is%20the%20Better%20Value&source=) **As a leading provider of OpenSearch®, the most popular open source search engine for analyzing, storing, and searching for data, our customers often ask us about the differences between OpenSearch and Elasticsearch.** **In this 2-part blog series, we’ll explore some of the key similarities and differences between these technologies. In this first blog we will explore one of the most important features of any database: security.** OpenSearch, Elasticsearch, and Security ---------------------------------------- When it comes to safeguarding your organization’s data, it is essential to prioritize secure storage and retrieval, minimizing the risk of compromise. Search engines such as Elasticsearch and OpenSearch provide a range of security features to protect your valuable assets. However, while both OpenSearch and Elasticsearch offer similar functionality, they differ in one keyway—security features in Elasticsearch are sold separately while they are included for free with OpenSearch. Here’s why we think that difference is important when weighing up which database to use for your search needs. Comparing OpenSearch and Elasticsearch Security Features --------------------------------------------------------- Firstly, let’s take a look at some of the key features that are available for OpenSearch and Elasticsearch. **Feature****Description****OpenSearch****Elasticsearch**Role Based Access ControlConfigure different levels of access based on user rolesFreeIncluded in Basic LicenseEncryption at restProtect data and backups that are stored on diskFreeRequires Platinum LicenseField and document level securityControl which documents and fields users have access toFreeRequires Platinum LicenseAudit loggingTrack, store, and review security events occurring in the clusterFreeRequires Platinum LicenseSSO (SAML) integrationIntegrate your organizations SSO to improve and simplify overall security and user managementFreeRequires Enterprise LicenseSecurity information and event management (SIEM)Detect, investigate, and respond to potential security threats in your OpenSearch clusterFreeIncluded in Basic LicenseBoth OpenSearch and Elasticsearch provide advanced security features, but there are some key differences between them. One significant distinction is that while Elasticsearch requires an additional licensing fee to access these advanced security features, OpenSearch offers a comprehensive range of both basic and advanced security features completely free of charge. This means that you can enjoy robust security measures without incurring any additional costs. ### Role Based Access Control (RBAC) Role-Based Access Control (RBAC) in OpenSearch is a crucial mechanism that enables fine-grained control over access to resources within the OpenSearch cluster. RBAC allows administrators to define roles and assign permissions to those roles, which are then associated with users or groups. Each role can be tailored to grant or restrict access to specific indices, documents, or cluster operations. RBAC is fully supported in open source OpenSearch and is also freely available in the basic version of Elasticsearch. ### Encryption At Rest Encryption at rest is a critical security measure offered by both OpenSearch and Elasticsearch. It ensures that data stored on disk is encrypted, reducing the risk of unauthorized access in case of a security breach. This feature helps protect sensitive information and provides an extra layer of security for your data. Encryption at rest is freely available in OpenSearch but requires an additional fee for Elasticsearch. ### Document-Level Security Field and document level security is another important aspect of security offered by both OpenSearch and Elasticsearch. It allows you to control access to specific fields or documents based on user roles and permissions. By implementing fine-grained access controls, you can ensure that only authorized individuals have access to sensitive data, minimizing the potential impact of a security incident. This critical feature is included for free in OpenSearch, however, requires an expensive Platinum license to use it in Elasticsearch. ### Audit Logging By enabling audit logging, administrators can capture and record detailed information about various activities and events occurring within the OpenSearch cluster. This includes actions such as authentication attempts, index and document operations, cluster configuration changes, and more. Audit logs provide a comprehensive audit trail that can be used for monitoring, troubleshooting, and investigating security incidents. Audit logging comes as standard in the freely available OpenSearch but requires an additional fee to use it in Elasticsearch. ### Single Sign On (SSO) OpenSearch also provides added authentication options, such as Single Sign-On (SSO) which supports multiple protocols, including SAML. SSO allows users to log in once and gain access to multiple systems or applications without the need for separate credentials. This streamlined authentication process improves user experience while maintaining strong security standards. However, if you are hoping to use SSO in Elasticsearch, you will need to pay for a Platinum license. ### Security Information and Event Management (SIEM) OpenSearch goes a step further by including built-in Security Information and Event Management (SIEM) functionality. In OpenSearch this functionality is enabled by the Security Analytics Plugin. The plugin enables you to analyze security events and monitor your system for potential threats. By leveraging SIEM capabilities, you can proactively detect and respond to security incidents, enhancing your overall security posture. Elasticsearch also includes a SIEM plugin as part of its free and basic license. \*\*\* All of these security features are included by default in OpenSearch at no additional cost. This means that you can enjoy a higher level of security without the overhead of increased licensing fees associated with Elasticsearch’s advanced security features. Why OpenSearch Is the Best Investment for the Long Term -------------------------------------------------------- When it comes to security when operating search applications at scale, OpenSearch comes out on top in the long run. OpenSearch provides a wide range of security functionality free of charge, while Elasticsearch requires an expensive license for the same features. This means that Elasticsearch customers will ultimately pay significantly more for the same product. OpenSearch continues to offer new security features for free while Elasticsearch adopts a strategy of charging for them. The OpenSearch community consistently releases innovative security features with each update, offering a distinct advantage of using an open source search engine. In contrast, Elasticsearch tends to reserve new security features for paid subscribers, resulting in increasing costs over time. For customers seeking a future-proof and cost-effective solution, OpenSearch is the obvious choice. Secure Your OpenSearch Clusters on the Instaclustr Managed Platform -------------------------------------------------------------------- While OpenSearch includes a range of fantastic security features, there are additional aspects, such as building an intrusion detection system and PCI compliance to consider if running OpenSearch yourself. These are all things that take time and resources from your bottom line. Luckily, with OpenSearch on the Instaclustr Managed Platform, you don’t have to worry about that. Our highly secure managed platform ensures your OpenSearch clusters remain secure, and our experienced Support team are always monitoring your infrastructure for problems. Experience the power of OpenSearch by quickly setting up a free cluster on the [Instaclustr Managed Platform](https://console2.instaclustr.com/signup). Alternatively, [contact our friendly team](https://www.instaclustr.com/contact-us/) to discuss your needs. ### About the author **[Alex Bunday](https://www.instaclustr.com/blog/author/abunday/)** | Product Manager Alex Bunday is a Product Manager with a strong focus on security and search within the Instaclustr Managed Platform, driving value through innovative solutions in the open source community. With expertise in managing product lifecycles and engaging stakeholders, Alex leverages data-driven insights to continuously improve and deliver impactful results. His collaborative approach empowers teams to develop and ship enhancements that meet customer needs and strengthen product offerings. [ Add Instaclustr as a preferred source on Google ](https://google.com/preferences/source?q=instaclustr.com) ![mail icon]()#### Get the latest articles for open sourceIn your inbox Sign up now ### Related content [ Zero Downtime Migration to Instaclustr Yes, we can migrate existing Cassandra clusters to Instaclustr without any downtime. Here's what to expect from the process... ](https://www.instaclustr.com/blog/zero-downtime-migration-to-instaclustr/) [ Workflow Comparison: Uber Cadence vs Netflix Conductor When choosing what’s right for your company’s opensource workflow needs it is important to know the difference and similarities ... ](https://www.instaclustr.com/blog/workflow-comparison-uber-cadence-vs-netflix-conductor/) [ Will Your Cassandra Database Project Succeed?: The New Stack Open source Apache Cassandra® continues to stand out as an enterprise-proven solution for organizations seeking high availability... ](https://www.instaclustr.com/blog/will-your-cassandra-database-project-succeed-the-new-stack/) ×Sign upto ourNewsletter -----------------------