Freedom251 › Managed Detection and Response Services
WithSecure MDR
What WithSecure MDR is
WithSecure MDR is a paid, fully managed service that monitors IT environments, investigates threats, and coordinates response using data from Elements EDR. Certified threat hunters provide 24/7/365 monitoring, and WithSecure says response is backed by a 60-minute SLA for 90% of cases. For confirmed incidents, its Detection and Response Team can isolate hosts, stop malicious processes, and remove persistence. Analysts may spend up to 30% of their time proactively hunting threats. MDR for Identities is an optional add-on for identity risks such as credential theft and suspicious role assignments through Microsoft Entra ID. Listed SIEM integrations include Microsoft Sentinel, Splunk, Elasticsearch, and Cortex XSOAR. Organizations must deploy the Elements Agent across devices before monitoring starts. Advanced Response must be enabled for analyst-led containment and remediation, and customers must provide two contacts whose combined availability covers 24/7. Major incidents may be escalated to WithSecure’s DFIR team, subject to availability. The listed starting price is €16.90/mo, with a 30-day trial; Elements pricing is modular through certified partners.
Who it suits
WithSecure MDR suits organizations seeking outsourced, continuous endpoint monitoring and coordinated incident response. It is intended for teams able to deploy Elements Agent and provide round-the-clock incident contacts.
What it does well
- 24/7/365 monitoring by certified threat hunters
- 60-minute SLA for 90% of cases
- Host isolation and malicious-process removal
- Proactive threat hunting
- Multiple listed SIEM integrations
What to know first
- Requires Elements Agent deployment
- Advanced Response must be enabled
- Two 24/7-covered incident contacts required
- No free plan
Limits
There is no free plan. The listed starting price is €16.90/mo with a 30-day trial; identity and cloud coverage are add-ons to the Elements MDR plan.
Plans
| Plan | Billed and limits | Price |
|---|---|---|
| WithSecure Elements MDR | Endpoint Protection (EPP) and Endpoint Detection & Response (EDR) included · Identity and cloud coverage available as add-ons | On request |
As withsecure.com lists them, read 30 Sept 2026. The maker's own page has the final word.
Getting started
- Visit the WithSecure MDR website
- Contact a certified partner to build an Elements combination and price
- Deploy the Elements Agent across the organization’s devices
- Enable Advanced Response for analyst containment and remediation
- Provide two incident response contacts covering 24/7 together
- Add MDR for Identities or listed SIEM integrations if required
Verdict
WithSecure MDR provides continuous monitoring, threat hunting, and response actions through Elements EDR. Its operational requirements and modular partner-led pricing should be considered before deployment.
Questions
What does WithSecure MDR include?
The WithSecure Elements MDR plan includes Endpoint Protection and Endpoint Detection & Response. Identity and cloud coverage are available as add-ons.
How much does WithSecure MDR cost?
WithSecure lists pricing from €16.90/mo and offers a 30-day trial. Elements pricing is modular and arranged through a certified partner.
Which platforms are supported?
The listed platforms are Linux, macOS, web and Windows.
What integrations are listed?
The WithSecure Elements catalog lists Microsoft Sentinel, Splunk, Elasticsearch and Cortex XSOAR as SIEM integrations.
What is required before monitoring starts?
Organizations must deploy the Elements Agent across their devices and provide two incident response contacts whose combined availability covers 24/7.
Is identity monitoring included?
MDR for Identities is an available add-on covering identity threats through Microsoft Entra ID.
Facts from WithSecure MDR's own pages
- Customer contacts
- Customers must provide two incident response contacts whose availability together covers 24/7. · support.withsecure.com, 30 Sept 2026
- Deployment requirement
- MDR requires deployment of the Elements Agent across the organization’s devices before monitoring can start. · support.withsecure.com, 30 Sept 2026
- Extended coverage
- MDR for Identities is available as an add-on and covers identity threats such as credential theft and suspicious role assignments through Microsoft Entra ID. · withsecure.com, 30 Sept 2026
- Founded
- 1988 · withsecure.com, 28 Sept 2026
- Headquarters
- Helsinki, Finland · withsecure.com, 28 Sept 2026
- Incident response
- For confirmed incidents, the Detection and Response Team can isolate hosts, kill malicious processes, and remove persistence. · withsecure.com, 30 Sept 2026
- Integrations
- The WithSecure Elements integration catalog lists Microsoft Sentinel, Splunk, Elasticsearch, and Cortex XSOAR among its SIEM integrations. · connect.withsecure.com, 30 Sept 2026
- Major incident support
- MDR customers may escalate major incidents to WithSecure’s DFIR team for deeper support, subject to availability. · withsecure.com, 30 Sept 2026
- Monitoring
- The MDR service provides 24/7/365 monitoring by certified threat hunters. · withsecure.com, 30 Sept 2026
- Platforms
- The Elements Agent used by MDR supports Windows, Mac, and Linux deployments. · support.withsecure.com, 30 Sept 2026
- Pricing
- WithSecure says Elements pricing is modular and directs buyers to a certified partner to build a suitable combination and price. · withsecure.com, 30 Sept 2026
- Proactive hunting
- WithSecure says its analysts spend up to 30% of their time proactively hunting threats. · withsecure.com, 30 Sept 2026
- Response authorization
- Advanced Response must be enabled to authorize WithSecure analysts to perform containment and remediation on the customer’s behalf. · support.withsecure.com, 30 Sept 2026
- Response time
- WithSecure states that its response time is SLA-backed at 60 minutes for 90% of cases. · withsecure.com, 30 Sept 2026
- Security assurance
- WithSecure states that it holds ISO/IEC 27001 certification for cloud-delivered business products and security services and undergoes ISAE 3000/SOC 2 Type II audits. · withsecure.com, 30 Sept 2026
- Service
- WithSecure MDR is a fully managed 24/7 service where experts monitor IT environments, investigate threats, and respond using data collected by Elements EDR. · withsecure.com, 30 Sept 2026