LICENSEWARE
Contribute

WithSecure licensing

From the LICENSEWARE WikiLast edited 17 ReferencesCited

This article is about licensing of WithSecure business security products (the WithSecure Elements platform, Co-Security services and the on-premises Business Suite). It does not cover F-Secure consumer products, which belong to a separate company since the 2022 demerger.

On This Page

WithSecure licensing covers how WithSecure Corporation, the Finnish company formed from the former F-Secure business security unit, licenses its business cybersecurity products. The main product family is WithSecure Elements, a cloud platform whose modules are sold as subscriptions through partners. They are priced per protected Device (workstations, servers and mobile devices) and per protected User identity (Microsoft Entra ID and Microsoft 365).[4] End customers can buy on annual licensing, a monthly subscription or usage-based pricing.[3] Expert services such as Elevate and managed detection and response are sold alongside the software as Co-Security Services.[10] All business solutions fall under the WithSecure Terms of Use (dated February 2026) unless the customer has a direct agreement with WithSecure.[1]

History and brand separation

WithSecure’s knowledge base states that “F-Secure Business became WithSecure in March 2022” and that the demerger between WithSecure and F-Secure took place on 1 July 2022, separating the business (B2B) and consumer (B2C) product offerings.[2] The earlier end user license agreement had been written for both businesses. WithSecure therefore introduced separate license terms for its B2B products, effective from 15 September 2022, and announced that it would communicate material changes 30 days in advance.[2] Consumer products sold under the F-Secure brand are therefore licensed by a different company under different terms and are not covered here.

The F-Secure name still shows up in WithSecure software. For example, the Elements agent’s command-line tools sit in a program folder named F-Secure\PSB.[5] When an inventory shows F-Secure-branded business agents, check whether they belong to a WithSecure entitlement before treating them as F-Secure consumer software.

Editions

WithSecure Elements is modular. Each module is activated with its own subscription key in Elements Security Center, the shared management portal.[5]

Module or service What it covers Priced by Source 
Elements Endpoint Protection (EPP for Computers, EPP for Servers, Standard and Premium) Windows, Mac and Linux workstations and servers; Premium adds DataGuard and Application Control Device [5] 
Elements Endpoint Detection and Response (EDR, EDR and EPP) Broad Context Detections, response actions; Partner Managed or Company Managed Device [7] 
Elements Mobile Protection iOS, Android and ChromeOS devices Device [4] 
Elements Collaboration Protection Exchange Online, SharePoint, OneDrive and Teams in Microsoft 365 User identity [4][6] 
Elements Identity Security / MDR for Identities Microsoft Entra ID identity threat detection and response User identity [4] 
Elements Exposure Management (for Business, for Cloud; for Devices, for Identities) Vulnerability scanning, attack-path simulation and external attack surface discovery Device and User identity [4][9] 
Co-Security Services (Elevate, MDR, Incident Response, Elements Infinite) Expert services on top of Elements; MDR runs on Elements EDR data and includes an Incident Response Retainer Service subscription, tokens or days [8][10] 
Business Suite (Policy Manager, Client Security, Server Security) On-premises managed endpoint security License certificate / customer number [16] 

For managed service providers, WithSecure packages these modules into two bundles, Elements Protect and Elements Proactive. Proactive adds Exposure Management for devices and identities.[4] The module content of each bundle is covered in WithSecure partner and MSP licensing.

Metrics

The catalog has four metric rows for WithSecure. See WithSecure Elements subscriptions and module licensing for the counting detail.

WithSecure object Catalog row Unit Used by 
Protected device Device Device EPP, EDR, Mobile Protection, Exposure Management for Devices, MDR for Endpoints 
Protected digital identity User identity User Collaboration Protection, Identity Security, MDR for Identities, Exposure Management for Identities 
Elevate token Elevate token Other Elevate on-demand threat analysis 
Incident response day Incident response day Other First Response Package, DFIR day-rates 

The MSP pricing page is the most explicit WithSecure statement of these metrics: “Different pricing is applied to protected devices (workstations, servers, mobile devices) vs. protected digital identities (Entra ID; M365).”[4] The Terms of Use frame the entitlement more generally: the customer may use the Solution “solely for the amount of users, seats or accounts that have been subscribed to”.[1] For how device and user metrics work in general, see Concurrent and device licensing and Named user licensing. WithSecure publishes no per-processor or per-core metric, so processor and core licensing rules do not apply to Elements servers. Servers are counted as protected devices, whatever their size.

Counting / floors

Seats in a subscription key. Every Elements endpoint consumes one installation of the subscription key it was installed with. “Before you can add a new device, you must have a subscription for an Endpoint Protection software with at least one free installation available.”[5] Removing a device frees its seat. If a removed device reconnects, it returns only if the subscription still has free space; otherwise it “is left without protection”.[5] Catalog: A device needs a free installation in an Endpoint Protection subscription, Removing a device frees the seat; reconnection only if seats are free.

Identities and mailboxes. Collaboration Protection protects only the mailboxes that fit within the licence. A WithSecure knowledge-base answer says that a mailbox that “can’t be protected by ECP because exceed license size” is not covered by the compromised-account feature.[14] Catalog: Collaboration Protection covers only mailboxes within the licence size.

Floors. WithSecure publishes no minimum order quantity for Elements modules. The MSP bundle prices are quoted for one identity and one device.[4] Elements EDR is sold in Partner Managed and Company Managed versions, “with options for 250+ seat end-customers to self-manage it”.[7] Catalog: EDR is sold as Partner Managed or Company Managed (self-managed for 250+ seats).

Telemetry threshold. The Terms of Use let WithSecure invoice excess usage when a customer’s “event or telemetry volume exceeds by more than twenty percent (20%) the WithSecure global average for the relevant Solution without a valid justification”.[1] This is the only usage-volume limit in the Terms. It sits on top of the device and identity counts. Catalog: Excess event or telemetry volume above 20% of the global average may be invoiced.

Virtualization & partitioning

WithSecure has no host-based virtualization rule. It counts virtual machines as devices, like physical ones. For persistent virtual desktop infrastructure on Citrix, VMware Horizon and similar platforms, the Endpoint Protection guide describes a golden-image method. Each server deployed from the image registers as its own device, and the subscription key “must be the same as you used when you installed the product for the image”.[5] For non-persistent desktops, where the SMBIOS GUID changes at every launch, WithSecure recommends identifying devices by the Active Directory computer GUID. This keeps a clone that is launched again from being counted as a new device.[5] Catalog: VDI golden images keep the same subscription key; non-persistent VDI uses the AD GUID.

Cloud / BYOL

Elements is a WithSecure-hosted service, so bring-your-own-license rules do not arise. WithSecure also sells Elements through AWS Marketplace, “using your existing AWS spend and procurement process”, with the same partner support.[3] Collaboration Protection connects cloud-to-cloud to a Microsoft 365 tenant, and each connection is bound to a chosen subscription key.[6] Exposure Management scans of Azure and AWS accounts are included in the Exposure Management for Cloud licence, not in the for Business licence.[9] Catalog: Exposure Management for Business vs for Cloud licence scope, WithSecure Elements on AWS Marketplace.

Programs

WithSecure sells almost entirely through partners. Its tiered Partner Program offers “higher discounts, additional incentives, and dedicated sales support”. It has separate Distributor and MSP programs, and the Partners page cites more than 5,000 partners.[11] End customers get subscription keys from their partner, and WithSecure sends end-customer billing questions to “your own WithSecure reseller partner”.[5][15] In the Partner Portal, a partner places either a “New SaaS Order” or a “New Yearly Order” for each customer company.[5] MSPs have no minimum commitment or contract length.[17]

Catalog programs: WithSecure Partner Program, WithSecure MSP Program, WithSecure Distributor Program, WithSecure Elements purchase models (annual, monthly, usage-based), WithSecure Elements on AWS Marketplace, WithSecure Elements DFIR Retainer, WithSecure evaluation and free trial. The consumption model is compared with other vendors’ models in Subscription and consumption licensing.

Contract terms

The Terms of Use grant “a non-exclusive, non-transferable, non-assignable, revocable right to use the specified Solution, for a specified time period”. Unless otherwise agreed, subscriptions renew automatically.[1] Customers may not sell, transfer or sublicense the Solution. A third party may administer it only “for your sole benefit and on your behalf”.[1] Liability is capped at the amounts paid in the six months before the event. Governing law is Finnish, or New York law for subscriptions bought by US users.[1] If a customer leaves under the EU Data Act, the Agreement ends when switching is complete, but “Any remaining subscription fees shall be payable as an early termination fee.”[13] The clauses are analysed in WithSecure Terms of Use.

Audits and compliance

The February 2026 Terms of Use contain no clause that gives WithSecure a right to audit or verify a customer’s deployment.[1] Compliance is enforced through the cloud service instead. WithSecure collects license allocation data automatically (“for example license allocation, device, and software information”).[1] A device cannot be activated once its subscription key has no free seats.[5] Excess telemetry can be invoiced.[1] The Linux product stops working “If the subscription cannot be validated for two weeks”.[5] On termination, the customer must stop all use and “delete any such copies of Solution” installed in its own environment.[1] For the general practice of vendor audits, see Software license audit.

On-premises Business Suite works differently. To use Policy Manager beyond evaluation, the customer must register it with “the customer number from your license certificate”. Unregistered installations can be used only for a 30-day evaluation period.[16] Catalog: Policy Manager requires registration with the customer number; 30-day evaluation otherwise.

Lifecycle

Under the Elements lifecycle policy, “All product versions with installable agents reach end of life three months after the general availability of the release of the next version following them.” Automatic updates are free of charge to customers with valid licenses.[12] WithSecure announces the end of life of a product or service at least six months before support ends. A Business Suite product series is supported for at least three years from general availability, or for one year after the next major version, whichever is longer.[12] Catalog: Elements agent versions reach end of life three months after the next version, Business Suite series lifecycle: three years or one year after next major.

Out of scope

  • F-Secure consumer products: licensed by F-Secure Corporation since the July 2022 demerger.[2]
  • WithSecure Cloud Protection for Salesforce: WithSecure’s terms page links out to separate Terms of Service for this product, which were not retrieved.
  • End-customer list prices: WithSecure publishes recommended retail prices only for the two MSP bundles. Annual and monthly prices for end customers are quoted by partners.[3][4]
  • AWS Marketplace listing terms: hosted by AWS, not by WithSecure.
  • Business Suite pricing and license certificate format: not published online.

Catalog rows

Rule rows are listed in the product and contract articles linked under See also.

References

  1. WithSecure Terms of UseDated February 2026. The former URL /en/about-us/legal/eula-en redirects here.Effective 2026-02-01. Retrieved 2026-09-26.
  2. WithSecure is refreshing the License Terms used for our products and services (WithSecure Community knowledge base)New B2B terms effective 15 September 2022; article date not shown.Effective 2022-09-15. Retrieved 2026-09-26.
  3. WithSecure for Business pricingUndated web pageRetrieved 2026-09-26.
  4. WithSecure for MSPs pricingUndated web page; recommended retail prices in eurosRetrieved 2026-09-26.
  5. Elements Endpoint Protection administrator guideCover date 2026-08-20; support.withsecure.com subdomainEffective 2026-08-20. Retrieved 2026-09-26.
  6. WithSecure Elements Collaboration Protection administrator guideCover date 2026-08-20Effective 2026-08-20. Retrieved 2026-09-26.
  7. WithSecure Elements Endpoint Detection and Response administrator guideCover date 2026-08-20Effective 2026-08-20. Retrieved 2026-09-26.
  8. WithSecure Elements Managed Detection and Response administrator guideCover date 2026-09-09Effective 2026-09-09. Retrieved 2026-09-26.
  9. WithSecure Elements Exposure Management user guide: Attack surface coverageUndated online guide topicRetrieved 2026-09-26.
  10. WithSecure Co-Security ServicesUndated web pageRetrieved 2026-09-26.
  11. WithSecure PartnersUndated web pageRetrieved 2026-09-26.
  12. WithSecure General product lifecycle policiesUndated policy pageRetrieved 2026-09-26.
  13. WithSecure EU Data Act addendumDated September 2025Effective 2025-09-01. Retrieved 2026-09-26.
  14. Does compromised account feature cover all users in Microsoft365 regardless of number of license on Elements Collaboration Protection? (knowledge base article 000014782)No visible dateRetrieved 2026-09-26.
  15. Where to contact about payments and billing regarding WithSecure Business Products (knowledge base article 000005658)No visible dateRetrieved 2026-09-26.
  16. Policy Manager Administrator's Guide (version 16.00)No date stated in the documentRetrieved 2026-09-26.
  17. WithSecure for MSPs: Why WithSecure (FAQ)Undated web pageRetrieved 2026-09-26.

See also

Esc