diff --git a/docs/release-notes.asciidoc b/docs/release-notes.asciidoc
index a5f09d0503..327cd960cd 100644
--- a/docs/release-notes.asciidoc
+++ b/docs/release-notes.asciidoc
@@ -3,6 +3,7 @@
 
 This section summarizes the changes in each release.
 
+* <<release-notes-8.1.0, {elastic-sec} version 8.1.0>>
 * <<release-notes-8.0.1, {elastic-sec} version 8.0.1>>
 * <<release-notes-8.0.0, {elastic-sec} version 8.0.0>>
 * <<release-notes-8.0.0-rc2, {elastic-sec} version 8.0.0-rc2>>
@@ -12,4 +13,5 @@ This section summarizes the changes in each release.
 :issue: https://github.com/elastic/kibana/issues/
 :pull: https://github.com/elastic/kibana/pull/
 
+include::release-notes/8.1.asciidoc[]
 include::release-notes/8.0.asciidoc[]
diff --git a/docs/release-notes/8.1.asciidoc b/docs/release-notes/8.1.asciidoc
new file mode 100644
index 0000000000..d69b081d81
--- /dev/null
+++ b/docs/release-notes/8.1.asciidoc
@@ -0,0 +1,40 @@
+[[release-notes-header-8.1.0]]
+== 8.1
+
+[discrete]
+[[release-notes-8.1.0]]
+=== 8.1.0
+
+[discrete]
+[[breaking-changes-8.1.0]]
+==== Breaking changes
+// tag::breaking-changes[]
+// NOTE: The breaking-changes tagged regions are re-used in the Elastic Installation and Upgrade Guide. The pull attribute is defined within this snippet so it properly resolves in the output.
+:pull: https://github.com/elastic/kibana/pull/
+There are no breaking changes in 8.1.0.
+// end::breaking-changes[]
+
+[discrete]
+[[features-8.1.0]]
+==== Features
+* Adds a *Technical preview* toggle above the Rules table which, when enabled, allows users to sort on all rule management columns ({pull}119611[#119611]).
+* Introduces a new *Host risk classification* column in the All hosts table on the *Hosts* page. In addition, a new *Host by risk* tab has been added to the *Hosts* page and host detail pages. From the *Host by risk* tab, you can access an explanation of how a host’s risk is calculated and scored ({pull}122980[#122980], {pull}122586[#122586], {pull}122018[#122018], {pull}121075[#121075], {pull}120487[#120487], {pull}119734[#119734]).
+* Introduces the ability to  bulk edit rule index patterns and tags ({pull}122635[#122635]).
+* Expands Endpoint per-policy artifact assignment to include endpoint event filters and host isolation IP exceptions ({pull}121879[#121879], {pull}121632[#121632]).
+* Adds the rule execution UUID field to alerts. In addition, the `kibana.alert.rule.execution.uuid` field is now part of the alert data schema and can be found in the field browser in the Alerts table.({pull}113058[#113058]).
+* Introduces case metrics that summarize alert information and response times ({pull}121336[#121336]).
+* Improves copy for the privilege check on the Endpoints page ({pull}124118[#124118]).
+
+[discrete]
+[[bug-fixes-8.1.0]]
+==== Bug fixes and enhancements
+* Improves the performance of indicator match rules ({pull}123882[#123882], {pull}123677[#123677]).
+* Changes the default indicator index query of custom and prebuilt indicator match rules to `@timestamp >= "now-30d/d"` ({pull}123590[#123590]).
+* Improves the exceptions interface by replacing the exceptions modal with a flyout ({pull}123408[#123408]).
+* Alert details flyout enhancements:
+** Shows different highlighted fields in an alert’s details flyout based on its type, category, and code ({pull}123239[#123239]).
+** Adds overview cards with key data to the alert details flyout ({pull}120347[#120347]).
+* Allows users to aggregate alert data based on a larger selection of ECS fields instead of just 10 preset options ({pull}120610[#120610]).
+* Enriches threshold-related alert data from correct fields ({pull}125376[#125376]).
+* Hides the delete button for disabled exception lists ({pull}122844[#122844]).
+* Fixes various minor UX bugs ({pull}121410[#121410]).