WithSecure MDR

What WithSecure MDR is

WithSecure MDR is a managed service that monitors IT environments, investigates threats and responds using data collected by Elements EDR. Monitoring is provided 24/7/365 by certified threat hunters. WithSecure states that its response time is backed by an SLA of 60 minutes for 90% of cases. For confirmed incidents, its Detection and Response Team can isolate hosts, stop malicious processes and remove persistence. Analysts spend up to 30% of their time proactively hunting threats, according to WithSecure. MDR for Identities is an optional add-on for identity threats such as credential theft and suspicious role assignments through Microsoft Entra ID. Listed SIEM integrations include Microsoft Sentinel, Splunk, Elasticsearch and Cortex XSOAR. Organizations must deploy the Elements Agent across their devices before monitoring starts, and Advanced Response must be enabled to authorize analyst-led containment and remediation. Customers also need two incident response contacts whose combined availability covers 24/7. The service has no free plan; the listed starting price is €16.90/mo and a 30-day trial is available. WithSecure says Elements pricing is modular and directs buyers to a certified partner for a suitable combination and price.