The Cybersecurity and Infrastructure Security Agency (CISA) has partnered with search AI company Elastic to build a unified Security Information and Event Management as-a-Service (SIEMaaS) platform on Elastic Cloud. 

Elastic combines search and AI to turn data into insights, powering search, observability, and security for over half of Fortune 500 companies.
With SIEMaaS, CISA aims to standardize security data across federal civilian agencies, enabling faster threat detection, improved visibility, and quicker incident response.

“Federal agencies remain a top target for cyber adversaries, and the current pace and complexity of attacks demand a new operational model. By consolidating cybersecurity telemetry into a shared, cloud-based SIEM service built on Elastic’s platform, CISA is setting a new standard for speed, scale, and collective defense across civilian agencies,” Ash Kulkarni, CEO of Elastic, said.

The initiative is expected to standardize cybersecurity monitoring across Federal Civilian Executive Branch agencies, improving speed, scale, and consistency while reducing data access and retention costs through Elastic’s standards-based platform.

The CISA engagement is supported by a $26 million base-year contract awarded through ECS, an ASGN brand specializing in data and AI, cybersecurity, and enterprise transformation. The contract includes options to renew for up to four additional years, bringing the total potential value to approximately $130 million.