# Security Measures 9200?

**URL:** <https://discuss.elastic.co/t/security-measures-9200/201324>\
**Category:** Elasticsearch\
**Created:** [September 26, 2019, 10:37pm UTC](https://discuss.elastic.co/t/security-measures-9200/201324 "2019-09-26T22:37:26Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![EliuFlorez](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/eliuflorez/32/40884_2.png) [@EliuFlorez](https://discuss.elastic.co/u/EliuFlorez)\
**Post date:** [September 26, 2019, 10:37pm UTC](https://discuss.elastic.co/t/security-measures-9200/201324/1 "2019-09-26T22:37:26Z")

</div>

Hello Team, you know I already have my doubts about eslasticSearch where I have seen that several pages and companies have stolen all your information just by consulting your endpoint. So what are the security measures that we must establish to avoid this problem and restrict public access or query limits. ??????

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [September 26, 2019, 11:05pm UTC](https://discuss.elastic.co/t/security-measures-9200/201324/2 "2019-09-26T23:05:41Z")

</div>

First: do not expose elasticsearch to internet  
Second: use security feature of elasticsearch (in basic license from 6.8 and 7.1)

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [October 24, 2019, 11:05pm UTC](https://discuss.elastic.co/t/security-measures-9200/201324/3 "2019-10-24T23:05:45Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.