Great question! we created Pulse with exactly this in mind - supporting Elasticsearch (and OpenSearch) running anywhere. You don't need the cluster to be exposed publicly. Integrating with Pulse is just about installing a lightweight and secure agent, which transmits metrics (only metrics, never data) to our service.