Editions
Compare the Community, Professional, and Enterprise editions and see which one fits.
Elastic AI Copilot comes in three editions. All of them run on your existing Elasticsearch 8.x or 9.x and install the same way. Every edition uses the same archive, and the activated license decides which capabilities are on.
Positioning
- Community: free. Natural-language query, live alerts, baseline, and masking on a single host. The archive is on GitHub Releases; every edition uses the same archive.
- Professional: unlocks the four AI engines (batch triage, agentic investigation, detection rules, platform ops) for one team on one cluster.
- Enterprise: everything in Professional, plus external SIEM forwarding, single sign-on, LLM high availability, multiple clusters, and offline issuance.
Capability comparison
| Capability | Community | Professional | Enterprise |
|---|---|---|---|
| Query and alerts | |||
| Natural-language query with follow-ups | |||
| Empty-result diagnosis | |||
| Live alert intake and summaries | |||
| Security posture overview | |||
| Data and compliance | |||
| Field dictionary and knowledge base | |||
| Asset and identity inventory | |||
| MLPS 2.0 and CIS baseline checks | |||
| Field masking (cloud, private, offline) | |||
| Notifications (Feishu, DingTalk, WeCom, and more) | |||
| Local audit log | |||
| AI engines | |||
| Alert batch triage | |||
| Alert investigation | |||
| Detection rule generation | |||
| Cluster health check-up and review | |||
| Reports and scheduled reports | |||
| Enterprise | |||
| Single sign-on (OIDC) | |||
| Audit log forwarding | |||
| LLM failover | |||
| Offline activation | |||
| Deployment and licensing | |||
| Users | 1 | Per user | Per contract |
| Nodes | 1 | 1 | Unlimited |
| License | Free | Commercial (monthly or annual subscription) | Commercial (annual subscription) |
Trial and purchase
A trial license opens every Enterprise capability for 14 days on one node.
Every edition uses the same archive. Without a license the four AI engines show as locked, clicking one offers the upgrade, and the rest of the product keeps running.
To upgrade a Community install, activate the license. No reinstall is needed; data and the host fingerprint are kept.
Trials and licenses: console.reallysec.com.