Elastic, the Search AI Company, has announced that it is partnering with the Cybersecurity and Infrastructure Security Agency (CISA) to develop a unified Security Information and Event Management as-a-Service (SIEMaaS) offering, using Elastic Security on Elastic Cloud. The new SIEMaaS will help to strengthen the security posture of U.S. federal civilian agencies by standardizing security data collection across agencies, enabling real-time threat detection and rapid incident response.
The commitment with CISA is part of a $26 million base-year contract through ECS, a provider of advanced technology solutions in data and AI, cybersecurity, and enterprise transformation, and an ASGN (NYSE: ASGN Incorporated) brand. This contract has the opportunity to renew under the same terms for up to four additional years, for a total anticipated agreement value of up to $130M.
Building on their long-standing partnership with CISA and Elastic’s leadership in next-gen SIEM, Elastic and ECS will help design, host, and operate a new SIEMaaS on its FedRAMP-certified Elastic Cloud. The program will standardize cybersecurity monitoring across Federal Civilian Executive Branch Agencies (FCEBs) to enhance security with greater speed, scale, and operational consistency, while leveraging Elastic’s standards-based platform to significantly reduce costs associated with data access and retention.
The first tenant to adopt the SIEMaaS platform is a large FCEB agency. This first implementation will serve as the operational blueprint for broader rollout across additional federal entities, to accelerate time-to-protection and create a repeatable, cost-efficient model for shared cyber defense.
“Federal agencies remain a top target for cyber adversaries, and the current pace and complexity of attacks demand a new operational model,” said Ash Kulkarni, CEO of Elastic. “By consolidating cybersecurity telemetry into a shared, cloud-based SIEM service built on Elastic’s platform, CISA is setting a new standard for speed, scale, and collective defense across civilian agencies.”
Under the program, the CISA Continuous Diagnostics and Mitigation Program Management Office will oversee the hosting and operations of the SIEMaaS environment, including infrastructure, data pipelines, enrichment workflows, and threat detection engines, all operated on FedRAMP-certified Elastic Cloud through a base year and four option years ending in 2030.
