# Security in Elasticsearch **URL:** \ **Category:** Elasticsearch\ **Tags:** elastic-stack-security\ **Created:** [March 27, 2017, 3:42am UTC](https://discuss.elastic.co/t/security-in-elasticsearch/80063 "2017-03-27T03:42:51Z")\ **Posts on this page:** 3\ **Page:** 1
**Author:** ![Anand\_Chandak](https://avatars.discourse-cdn.com/v4/letter/a/a6a055/32.png) [@Anand\_Chandak](https://discuss.elastic.co/u/Anand_Chandak)\ **Post date:** [March 27, 2017, 3:42am UTC](https://discuss.elastic.co/t/security-in-elasticsearch/80063/1 "2017-03-27T03:42:51Z")
Have some queries about the security in ES 🙂 1 ) Using the REST client can a secure connection be made to Elastic-Search without a need for any ES server plugin (shield ?) Or is it that a shield is needed for secure connection irrespective of the type of client ? can you please clarify 1. Is the X-Pack released under propitiatory license ? ---
**Author:** ![TimV](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/timv/32/13162_2.png) [@TimV](https://discuss.elastic.co/u/TimV)\ **Post date:** [March 27, 2017, 7:23am UTC](https://discuss.elastic.co/t/security-in-elasticsearch/80063/2 "2017-03-27T07:23:12Z")
1. If you run Elasticsearch without any server plugins, then it does not include any security features. Anyone who has network access to Elasticsearch will have access to read, update or delete all data in the cluster. This is true regardless of the client type they are using. The [elastic blog](https://www.elastic.co/blog/protecting-against-attacks-that-hold-your-data-for-ransom) has more information about ways to protect your Elasticsearch cluster 2. X-Pack is commercial software with its own licensing terms. You can read about [subscription options](https://www.elastic.co/subscriptions) on the website, or contact one of the team to get more details about the licensing terms. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [April 24, 2017, 7:23am UTC](https://discuss.elastic.co/t/security-in-elasticsearch/80063/3 "2017-04-24T07:23:27Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.