Elastic Security earned the Certified Leader designation in AV-Comparatives' 2026 Endpoint Prevention and Response (EPR) Test, marking the second consecutive year the NYSE-listed company has received the industry's highest distinction.
Among 14 vendors tested, Elastic was the only product to achieve a perfect protection score, blocking all 50 multi-phase attack scenarios at their first stage of compromise with zero false positives. It was also the sole vendor to prevent and report every threat before it progressed to Internal Propagation or Asset Breach phases.
The attack scenarios were based on the MITRE ATT&CK framework and covered Initial Access, Execution, and Persistence tactics, including executables, scripts, Office add-ins, USB-propagated payloads, fileless execution techniques, AMSI bypasses, and EDR unhooking.
Andreas Clementi, founder and CEO of AV-Comparatives, said: "The product prevented and detected every one of the tested attack scenarios already at the first stage of compromise with no operational accuracy costs and no workflow delays for the user."
Elastic recorded one of the lowest total costs of ownership among the 14 vendors tested and posted the lowest modeled operational footprint of any product evaluated. It achieved 100% scores in both Active and Passive Response categories.
In Business Security Tests covering 2025 through early 2026, Elastic achieved 100% malware protection across three tests, including the most recent one spanning March through June 2026.
Elastic Defend, the endpoint protection product evaluated in the test, supports Windows, macOS, and Linux across cloud, on-premise, hybrid, and air-gapped environments.
