From 5f99ff800b3e63d523a044bdc604a01b711cd9fd Mon Sep 17 00:00:00 2001 From: Benjamin Ironside Goldstein Date: Thu, 7 Aug 2025 14:28:28 -0700 Subject: [PATCH 1/3] Adds EASE to feature tiers doc --- deploy-manage/deploy/elastic-cloud/project-settings.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/deploy-manage/deploy/elastic-cloud/project-settings.md b/deploy-manage/deploy/elastic-cloud/project-settings.md index bf0a028cf6..e5c787627b 100644 --- a/deploy-manage/deploy/elastic-cloud/project-settings.md +++ b/deploy-manage/deploy/elastic-cloud/project-settings.md @@ -63,7 +63,8 @@ For {{elastic-sec}} projects, edit the **Project features** to select a feature | Feature tier | Description and add-ons | | :--- | :--- | -| **Security Analytics Essentials** | Standard security analytics, detections, investigations, and collaborations. Allows these add-ons:

* **Endpoint Protection Essentials**: endpoint protections with {{elastic-defend}}.
* **Cloud Protection Essentials**: Cloud native security features.
| +| **Elastic AI SOC Engine (EASE)** | A package of AI-powered tools meant to work with and enhance your existing SOC platforms: alert triage and correlation with Attack Discovery, get realtime recommendations and assistance from AI Assistant, and share insights with your other tools. | +| **Security Analytics Essentials** | Everything in EASE, plus a suite of security analytics, detections, investigations, and collaboration tools. Allows these add-ons:

* **Endpoint Protection Essentials**: endpoint protections with {{elastic-defend}}.
* **Cloud Protection Essentials**: Cloud native security features.
| | **Security Analytics Complete** | Everything in **Security Analytics Essentials** plus advanced features such as entity analytics, threat intelligence, and more. Allows these add-ons:

* **Endpoint Protection Complete**: Everything in **Endpoint Protection Essentials** plus advanced endpoint detection and response features.
* **Cloud Protection Complete**: Everything in **Cloud Protection Essentials** plus advanced cloud security features.
| #### Downgrading the feature tier [elasticsearch-manage-project-downgrading-the-feature-tier] From e766f0cae70a89017c7fedca96a7d02c1b50a529 Mon Sep 17 00:00:00 2001 From: Benjamin Ironside Goldstein Date: Thu, 7 Aug 2025 14:53:45 -0700 Subject: [PATCH 2/3] fixes a mistake --- deploy-manage/deploy/elastic-cloud/project-settings.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/deploy-manage/deploy/elastic-cloud/project-settings.md b/deploy-manage/deploy/elastic-cloud/project-settings.md index e5c787627b..1e869f7281 100644 --- a/deploy-manage/deploy/elastic-cloud/project-settings.md +++ b/deploy-manage/deploy/elastic-cloud/project-settings.md @@ -63,7 +63,7 @@ For {{elastic-sec}} projects, edit the **Project features** to select a feature | Feature tier | Description and add-ons | | :--- | :--- | -| **Elastic AI SOC Engine (EASE)** | A package of AI-powered tools meant to work with and enhance your existing SOC platforms: alert triage and correlation with Attack Discovery, get realtime recommendations and assistance from AI Assistant, and share insights with your other tools. | +| **Elastic AI SOC Engine (EASE)** | A package of AI-powered tools meant to work with and enhance your existing SOC platforms: triage and correlate alerts from any platform using Attack Discovery, get realtime recommendations and assistance from AI Assistant, and share insights with your other tools. | | **Security Analytics Essentials** | Everything in EASE, plus a suite of security analytics, detections, investigations, and collaboration tools. Allows these add-ons:

* **Endpoint Protection Essentials**: endpoint protections with {{elastic-defend}}.
* **Cloud Protection Essentials**: Cloud native security features.
| | **Security Analytics Complete** | Everything in **Security Analytics Essentials** plus advanced features such as entity analytics, threat intelligence, and more. Allows these add-ons:

* **Endpoint Protection Complete**: Everything in **Endpoint Protection Essentials** plus advanced endpoint detection and response features.
* **Cloud Protection Complete**: Everything in **Cloud Protection Essentials** plus advanced cloud security features.
| From bb83080a18217e85d632f3ddc3bbae63879bb74c Mon Sep 17 00:00:00 2001 From: Benjamin Ironside Goldstein Date: Fri, 8 Aug 2025 09:51:59 -0700 Subject: [PATCH 3/3] incorporates James' review --- deploy-manage/deploy/elastic-cloud/project-settings.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/deploy-manage/deploy/elastic-cloud/project-settings.md b/deploy-manage/deploy/elastic-cloud/project-settings.md index 1e869f7281..8b5a1e715a 100644 --- a/deploy-manage/deploy/elastic-cloud/project-settings.md +++ b/deploy-manage/deploy/elastic-cloud/project-settings.md @@ -69,6 +69,10 @@ For {{elastic-sec}} projects, edit the **Project features** to select a feature #### Downgrading the feature tier [elasticsearch-manage-project-downgrading-the-feature-tier] +:::{note} +You cannot downgrade to EASE from any other feature tier. You can upgrade from EASE to other tiers. +::: + When you downgrade your Security project features selection from **Security Analytics Complete** to **Security Analytics Essentials**, the following features become unavailable: * All Entity Analytics features