Home / Cybersecurity / WithSecure Elements
WithSecure (Helsinki, Finland)WithSecure Elements
Cloud security platform with XDR, exposure management and managed services. The built-in GenAI assistant Luminen explains detections in plain language and advises on remediation.
Shared spot2of 13 professional tools with a GDPR profileOur summary of what the provider itself publishes about your data: whether the data is held in the EU (2 points), whether there is a certification or GDPR guarantee (1) and whether the provider is based in the NL or the EU (1). 3 or 4 points is Strong, 2 Good, 1 Limited, 0 Unknown. How we measure in cybersecurity
GDPR: Good
- Provider based in the EU
- Publishes certification/GDPR safeguards
Priceon requeston request (Luminen at no extra cost for relevant Elements users)
Free trialYes
BasedHelsinki, FinlandEU
ModelNot publicLuminen uses language models via Amazon AWS Bedrock; which model is not public. According to the provider, all data is processed in Europe within AWS, no models are queried outside AWS, and customer data is not used to train foundation models. ISO 27001. Finnish company (EU).
Last checked: 6 November 2026 · How we check
Is this your tool? Fill in missing detailsWhat it does
Exposure Management (XM) with attack path simulation
XDR for endpoints, identities, cloud and emailProtection of Microsoft 365, Teams and SharePoint
Luminen: detections explained in plain language
Luminen: recovery advice per incident
Weekly summary in your own language
Co-Security Services up to 24/7 MDR
Free trial of 30 days
Comparable in cybersecurity
SoSafefrom €625/month (billed annually…
365 Total Protectionon request
Aikido SecurityDeveloper free (2 users, 1…
TinesFree Edition free (3 live workf…
HadrianNova from €1,250 per test (bundle…
Eye Securityon requestWithSecure Elements compared
Underlying model
GDPR check for cybersecurity Luminen uses language models via Amazon AWS Bedrock; which model is not public. According to the provider, all data is processed in Europe within AWS, no models are queried outside AWS, and customer data is not used to train foundation models. ISO 27001. Finnish company (EU). Many tools build on a large model from, for example, OpenAI or Anthropic. If in doubt, ask for the data processing agreement: it sets out where your data goes.
Questions about WithSecure Elements
- Which AI model does WithSecure Elements use?
- The maker of WithSecure Elements does not disclose which AI model sits underneath. Luminen uses language models via Amazon AWS Bedrock; which model is not public. According to the provider, all data is processed in Europe within AWS, no models are queried outside AWS, and customer data is not used to train foundation models. ISO 27001. Finnish company (EU).
- How much does WithSecure Elements cost?
- On request (Luminen at no extra cost for eligible Elements users). Check the current price on the provider's website; rates change often.
- Who is WithSecure Elements for?
- WithSecure Elements is aimed at cybersecurity. It fits work such as detection and triage: assessing, bundling and summarising alerts from endpoints, network, cloud and email; investigation and response: finding out what happened in incidents, building queries and proposing or carrying out countermeasures; and attack surface and pentesting: mapping reachable systems and testing for vulnerabilities with AI agents.
- What should I watch out for with AI in cybersecurity?
- A security tool sees everything: log files, emails, usernames and network traffic. That is personal data, so you need a data processing agreement and must know where the data is stored. Also ask whether the AI assistant is trained on your data. WithSecure (Finland) says it processes data for Luminen in AWS in Europe and does not train foundation models on customer data. Sekoia stores data in Germany or elsewhere in the EU/EEA and is ISO 27001 certified. SoSafe (France) can run self-hosted. With Microsoft Security Copilot you choose the geo of your workspace, but sharing data with Microsoft is on by default. For Charlotte AI, ESET LiveAI and Mindgard the hosting location is not public. Never let an agent act on production systems without analyst approval, and record who makes the 24-hour report under the Cybersecurity Act when an incident occurs.
Every Friday: what changed in AI for cybersecurity
New models, prices, oversight and tools, with sources and what it means for you. One email a week, unsubscribe with one click.