&gt; Elasticsearch<p>Yea. I found that surprising when it came time to use ElasticSearch for my own purposes. If you want security, you need to setup something <i>between</i> the ElasticSearch server and the clients to moderate.