A new version of the endpoint clients is available and our Early access program participants will start seeing it starting on 24.09.2026. Full availability will begin within the next week and takes some days to reach all customers.

This release makes the Elements Agent version 26.4 available (internal version 26.4.612).

The endpoints automatically upgrade, without a reboot.

This release introduces new features (with Profile Editor Update).

Features:

• The “Upload suspicious samples to WithSecure Security Cloud” setting is now a three-option choice instead of an on/off toggle.
  

  

• Windows system event 4726 “A user account was deleted” can now be enabled from the Security Configurations profile in the portal. Once selected, WithSecure Elements Agent monitors this event and forwards it to Security Events.
  

  

• Software Updater: When an update is blocked by a running application, the Blocking Processes dialog now offers a “Close applications and continue” option to force-close the blocking app(s).
  

  

• Encrypt and decrypt fixed drives options are enabled and available from portal.
  

  

• More reliable EDR sensor status reporting that stays in sync with the profile setting.
• Improved Fsscan.exe compatibility with non-administrator accounts.

A new version of the endpoint clients is available and our Early access program participants will start seeing it starting on 23.06.2026. Full availability will begin within the next week and takes some days to reach all customers.

This release makes the Elements Agent version 26.3 available (internal version 26.3.298).

The endpoints automatically upgrade, without a reboot.

This release introduces new features

• Sensor Status Reporting : Elements Security Center can now report detailed Windows Sensor health states – enabled, disabled, connectivity issue, malfunction, or not applicable – giving users clearer visibility into Sensor issues beyond basic connectivity.

• Global Proxy State: The Windows Elements Agent now implements a shared proxy discovery mechanism, so all components reuse the first successfully discovered proxy rather than discovering independently – reducing delays in profile assignments and remote operations.
• Browser Extensions icon in the Settings sidebar is now visible in dark mode.

A new version of the endpoint clients is available and our Early access program participants will start seeing it starting on 07.04.2026. Full availability will begin within the next week and takes some days to reach all customers.

This release makes the Elements Agent version 26.2 available (internal version 26.2.301).

The endpoints automatically upgrade, without a reboot.

This release introduces new features (with Profile Editor Update).

Features:

• Browser Extensions Tab in Settings:
  A new “Browser Extensions” tab has been added to the Settings dialog. This tab shows the status of the Browsing Protection extension for each installed browser and provides options to open the browser’s extension store or copy the installation link.

  

• New Network Isolation Security Events:
  Two new security events have been introduced to enhance visibility into network isolation actions.
  “Computer has been isolated from the network”
  
  “Computer has been released from the network isolation”

  

• Remote Operation to Reset Security Cloud Cache:
  Added a new remote operation to reset the Security Cloud cache.

  

• Enhanced Malware Protection Status Reporting:
  Improved the reporting of malware protection unload status during service startup.

A new version of the endpoint clients is available and our Early access program participants will start seeing it starting on 17.02.2026. Full availability will begin within the next week and takes some days to reach all customers.

This release makes the Elements Agent version 26.1 available (internal version 26.1.549).

The endpoints automatically upgrade, without a reboot.

This release introduces new features

• Windows License Status is displayed under Security Parameters in the portal UI.

• SHA256 is now included in more security events.
• DataGuard icon changed to look more lightweight 
• DriveProtector/BitLocker minor improvements
• Profile and definitions are downloaded faster if network configuration has changed (earlier network configuration did not affect at all and all checks were according to schedule)
• Allow untrusted browsers setting enables access from non-trusted browsers (requires portal too)
• Report AD guid if set
• Fix for Malware Protection reporting Disabled for healthy hosts
• Increase remote wsdiag size limit to 512 Mb (previously it was just 200Mb)
• Quarantine release tooltips explain file restoration reasons
• New host issue detection and reporting for insecure configuration allowing Agent uninstallation (Empty uninstallation password status detection and reporting requires the portal release as well)

A new version of the endpoint clients is available and our Early access program participants will start seeing it starting on 04.12.2025. Full availability will begin within the next week and takes some days to reach all customers.

This release makes the Elements Agent version 25.5 available (internal version 25.5.416).

The endpoints automatically upgrade, without a reboot.

This release introduces new features (with Profile Editor Update).

Features:

• Software Updater Engine:
  The software updater engine is now downloaded directly from the Update server instead of being bundled with the MSI installer, resulting in more efficient update delivery.
• Enhanced Agent Connectivity Diagnostics:
  The agent now provides more comprehensive connectivity status information to the portal, enabling better troubleshooting and diagnosis of sensor connectivity issues.
• Browsing Protection – Newly Registered Domain Blocking:
  Browsing protection now blocks newly registered domains when this feature is enabled from the portal, providing enhanced protection against potential threats from recently created domains.

  

• Enhanced Proxy Settings Management:
  Starting with this version, any proxy settings provided during installation will be automatically replaced by the proxy value from the assigned profile after the first successful profile assignment, providing better administrative control.

A new version of the endpoint clients is available and our Early access program participants will start seeing it starting on 04.09.2025. Full availability starts one week later and takes some days to reach all customers.

This release makes the Elements Agent version 25.4 available (internal version 25.4.231).

The endpoints automatically upgrade, without a reboot.

This release introduces new features (with Profile Editor Update) and fixes.

Features:

• User-modified settings reporting:
  Agent now reports user-modified settings to the portal.
  These settings can be reset to profile values remotely via the portal UI.

  

• Additional host information is now reported to the portal:
  Agent reports the current Elements Connector address used by software updater.
  Agent reports the current definition updates source address.

  

• Improved agent UI:
  The agent UI now provides clearer indications when protection is turned off.

A new version of the endpoint clients is available and our Early access program participants will start seeing it starting on 26.06.2025. Full availability starts one week later and takes some days to reach all customers.

This release makes the Elements Agent version 25.3 available (internal version 25.3.159).

The endpoints automatically upgrade, without a reboot.

This release introduces new features (with Profile Editor Update) and fixes.

Features:

• Application Control Enhancements: Added new rule types for BCD creation, OR condition to group multiple conditions in a single rule for greater rule flexibility.
• Disk Encryption: New option to encrypt system or all fixed drives directly from the profile editor, in addition to remote operations.
• Option to choose between classic or modern Windows 11 context menu for malware scanning.
• Introduced a new Artificial Intelligence category for URL filtering.
• Added support for disabling Device Control through remote operations. 
• Added a new option to disable the sending of security events for denied sites. When this setting is turned off, administrators will no longer receive security events related to access attempts on denied sites.  
• Introduced a new option: Skip a scheduled scan while the device is running on battery. Enable this setting to prevent scheduled scans from running when the device is on battery power, preserving battery life.

A new version of the WithSecure Ultralight Core update (expected version 2025-05-09_01), part of the Windows endpoint client, is available and our Early access program participants will start seeing it starting on 19th of May 2025. Full availability starts one week later, on 26th of May 2025.

This release introduces a new ‘wsulavprothoster‘ service, executing ‘fsulprothoster.exe‘ process. For partners and customers who have custom integrations in their endpoint devices to ensure that the EPP product is functioning correctly, we advise that these integrations are reviewed to ensure correct functionality. 

For more details please check Changes to the Windows EPP Scanning Components – May 2025

A new version of the Windows Ultralight Core update intended to go out to our Early Access Program participants today, 7th of May 2025, has been postponed due to issues found during the preparation phase. We apologize for the delays related to this release, but we are committed to making sure that we release content with the highest possible quality. We will advise on the release schedule for the new update.

A new version of the WithSecure Ultralight Core update (expected version 2025-04-23_02), part of the Windows endpoint client, is available and our Early access program participants will start seeing it starting on 7th of May 2025. Full availability starts one week later, on 14th of May 2025.

This release introduces a new ‘wsulavprothoster‘ service, executing ‘fsulprothoster.exe‘ process. For partners and customers who have custom integrations in their endpoint devices to ensure that the EPP product is functioning correctly, we advise that these integrations are reviewed to ensure correct functionality. 

For more details please check Changes to the Windows EPP Scanning Components – May 2025