CyberIndexBeta

Product

Endpoint detection and response module of WithSecure Elements. Elements XDR is a unified solution built to protect modern IT estates — combining prevention, detection, and response across endpoints, identities, email, and cloud from a single platform. WithSecure™ Elements XDR closes each of these gaps in one platform, detecting attempted and ongoing attacks — and helping you stop attackers in their tracks. WithSecure™ Elements XDR includes Endpoint Security, Identity Security, Collaboration Protection, and Cloud Security. WithSecure Elements EDR covers Linux, macOS and Windows.

Current Version
26.4
Market
EnterpriseService ProviderSMB
Licence
Paid
Price
Quote
Record Created
2026-09-19
Last Updated
2026-10-20

Vendor

WithSecure is the half of F-Secure that kept the business customers. The original company was founded in Helsinki in 1988 as Data Fellows by Petri Allas and Risto Siilasmaa, became F-Secure, and in 2022 split in two: consumer products stayed with F-Secure, and everything sold to organisations became WithSecure. They are now separate companies with a shared history, and both appear in this index. Its products are gathered under WithSecure Elements, one cloud platform with modules for Endpoint Protection, Endpoint Detection and Response, Exposure Management and Collaboration Protection, sold largely through a partner network rather than direct. WithSecure Countercept is the managed detection and response service above it, run by the company's own analysts. It sells mainly into Europe and Japan and leans on that in its compliance positioning — GDPR and NIS2 alignment, ISO 27001, ISAE 3000 and SOC 2 Type II. The practical consequence of the 2022 split, for anyone reading older reviews, is that a test result published under the F-Secure name may describe a product now sold by this company, or by the other one. Vendor page →

Country
Finland
Headquarters
Helsinki, Finland
Year Established
1988
Customers
100K business customers
Users
6M devices protected
Revenue
≈ $127.6M (2024)

Platforms

Linuxnative
macOSnative
Windowsnative

Target Market

Enterprise secondaryService Provider secondarySMB primary

Capabilities

Malware DetectionkeyNot known
Ransomware ProtectionkeyNot known
Behavioral Detectionkeynative
Web ProtectionkeyNot known
Email ProtectionNot known
Host FirewallNot known
Sandbox AnalysisNot known
Cloud-Assisted Scanningnative
Heuristic DetectionNot known
Device ControlNot known
Vulnerability ShieldingNot known
Central Management Consolenative

9 of 12 not yet known — not recorded, which is not the same as not supported.

Pricing

PlanLicencePriced perBilledPrice
SummaryPrice on requestnot statedno recurring chargeQuote

Versions

  • 26.4Windows

The newest release each source names per platform, not every release the vendor has shipped. A release date is shown only where one is recorded.

Independent Tests

Not tested This product does not appear in any test run CSI holds. That is not a low score.

Certifications

Not known

Change History

This record was created 2026-09-19. Everything below is what has changed since.

  • 2026-10-20New versionNew version: 26.4 (Windows)evidence
  • 2026-09-23Capability addedCentral Management Console: built inevidence
  • 2026-09-23Capability addedCloud-Assisted Scanning: built inevidence
  • 2026-09-23Capability addedBehavioral Detection: built inevidence
  • 2026-09-22Product updatedListed in Enterprise Antimalwareevidence
  • 2026-09-22Product updatedListed in Small Business Antimalwareevidence
  • 2026-09-20Pricing plan addedPrice: price on requestevidence
  • 2026-09-19Product createdNew product listedevidence
  • 2026-09-19Product updatedAlso sold to: Service Providerevidence
  • 2026-09-19Product updatedAlso sold to: Enterpriseevidence
  • 2026-09-19Product updatedSold to: SMBevidence
  • 2026-09-19Platform addedRuns on Linuxevidence
  • 2026-09-19Platform addedRuns on macOSevidence
  • 2026-09-19Platform addedRuns on Windowsevidence

May we count your visit? CyberIndex would like to use Google Analytics to see which pages are read. It sets cookies and sends your visit to Google. Decline and nothing is loaded — the site works the same either way. Privacy.