{"id":2668,"date":"2026-05-20T14:21:09","date_gmt":"2026-05-20T11:21:09","guid":{"rendered":"https:\/\/ws-sup.fi-s.seravo.com\/?page_id=2668"},"modified":"2026-11-02T17:18:08","modified_gmt":"2026-11-02T15:18:08","slug":"login","status":"publish","type":"page","link":"https:\/\/support.withsecure.com\/en\/login\/","title":{"rendered":"Login"},"content":{"rendered":"<section\n    class=\"wp-block-support-banner edwp-block wp-block-support-banner--bg-light-gray layout--spacing-xxxl-top layout--spacing-xxxl-bottom\"\n    >\n            <div class=\"wp-block-support-banner__container\">\n        <div class=\"wp-block-support-banner__content-wrapper\">\n                        <div class=\"wp-component-content wp-component-content--default wp-block-support-banner__content\">\n            <h2 class=\"wp-component-heading text--h2 wp-component-content__title\">\n    Login to WithSecure services<\/h2>                    <div class=\"wp-component-content__inner\">\n                                    <div class=\"wp-component-content__content wysiwyg\">\n                        <div class=\"wp-component-paragraph \">\n    <h4>Don't have access yet?\u00a0 <a href=\"https:\/\/partner.withsecure.com\/\" target=\"_blank\" rel=\"noopener noreferrer\">Request credentials<\/a>.<br \/>\nIn case of any issues, please contact our <a href=\"https:\/\/support.withsecure.com\/en\/contact-support\/\" target=\"_blank\" rel=\"noopener noreferrer\">customer support.<\/a><\/h4>\n<\/div>\n                    <\/div>\n                                                            <\/div>\n                <\/div>                                <\/div>\n    <\/div>\n        <\/section>\n\n\n<section\n    class=\"wp-block-cards edwp-block wp-block-cards--col-3 layout--spacing-xxxl-top layout--spacing-xxxl-bottom\"\n    >\n    <div class=\"wp-block-cards__container\">\n        <div class=\"wp-component-content wp-component-content--default wp-block-cards__content\">\n            <h2 class=\"wp-component-heading text--h3 wp-component-content__title\">\n    All services with one user login<\/h2>                    <div class=\"wp-component-content__inner\">\n                                    <div class=\"wp-component-content__content wysiwyg\">\n                        <div class=\"wp-component-paragraph \">\n    <div class=\"title parbase h2 aem-GridColumn--default--none aem-GridColumn--offset--xs--0 aem-GridColumn aem-GridColumn--default--7 aem-GridColumn--xs--none aem-GridColumn--offset--md--0 aem-GridColumn--xs--7 aem-GridColumn--offset--default--0 aem-GridColumn--md--none aem-GridColumn--md--12\">\n<p class=\"cmp-title__text black-text\"><span style=\"font-family: Archivo, helvetica, arial, sans-serif; font-size: 18px;\">Use your <\/span><b style=\"font-family: Archivo, helvetica, arial, sans-serif; font-size: 18px;\">Business Account<\/b><span style=\"font-family: Archivo, helvetica, arial, sans-serif; font-size: 18px;\">\u00a0credentials to access any WithSecure service. You will be automatically logged in, so there's no need to sign in again.<\/span><\/p>\n<\/div>\n<\/div>\n                    <\/div>\n                                                            <\/div>\n                <\/div>                                            <div class=\"wp-block-cards__cards row-load\">\n                    <article class=\"wp-component-card wp-block-cards__card wp-component-card--style-default\">\n    <div class=\"wp-component-card__content\">\n        <div>\n                                    <h2                            class=\"wp-component-card__title\"\n            >\n                Elements Security Center        <\/h2>\n                    <\/div>\n                    <p class=\"wp-component-card__description\">\n                Elements Security Center is a user portal for WithSecure&#039;s cloud-based platform, which provides a full range of cyber security capabilities, serving your end-to-end security management needs from a single portal.            <\/p>\n                            <div class=\"wp-component-card__button-wrapper\">\n                                    <a target=\"_blank\" rel=\"noopener noreferrer\" class=\"wp-component-button btn btn--primary wp-component-card__button\" href=\"https:\/\/elements.withsecure.com\">Go to login page<svg class='edwp-icon edwp-icon--reg button-icon js-icon ' aria-hidden='true'>\n                <use xlink:target=\"_blank\" rel=\"noopener noreferrer\" href='#arrow'><\/use>\n            <\/svg><\/a>                                            <\/div>\n            <\/div>\n<\/article>\n<article class=\"wp-component-card wp-block-cards__card wp-component-card--style-default\">\n    <div class=\"wp-component-card__content\">\n        <div>\n                                    <h2                            class=\"wp-component-card__title\"\n            >\n                eService Portal        <\/h2>\n                    <\/div>\n                    <p class=\"wp-component-card__description\">\n                The WithSecure eService Portal is a support case management portal that allows customers with advanced or premium support contracts to submit and follow up on their support tickets and access self-service options or knowledge bases.            <\/p>\n                            <div class=\"wp-component-card__button-wrapper\">\n                                    <a target=\"_blank\" rel=\"noopener noreferrer\" class=\"wp-component-button btn btn--primary wp-component-card__button\" href=\"https:\/\/eservice.withsecure.com\">Go to login page<svg class='edwp-icon edwp-icon--reg button-icon js-icon ' aria-hidden='true'>\n                <use xlink:target=\"_blank\" rel=\"noopener noreferrer\" href='#arrow'><\/use>\n            <\/svg><\/a>                                            <\/div>\n            <\/div>\n<\/article>\n<article class=\"wp-component-card wp-block-cards__card wp-component-card--style-default\">\n    <div class=\"wp-component-card__content\">\n        <div>\n                                    <h2                            class=\"wp-component-card__title\"\n            >\n                Partner Portal        <\/h2>\n                    <\/div>\n                    <p class=\"wp-component-card__description\">\n                The Partner Portal is an online service that allows WithSecure Partners acess to the tools that help them sell our solutions. See all your customers in one place, calculate offers and send orders easily through the Portal.            <\/p>\n                            <div class=\"wp-component-card__button-wrapper\">\n                                    <a target=\"_blank\" rel=\"noopener noreferrer\" class=\"wp-component-button btn btn--primary wp-component-card__button\" href=\"https:\/\/partner.withsecure.com\/\">Go to login page<svg class='edwp-icon edwp-icon--reg button-icon js-icon ' aria-hidden='true'>\n                <use xlink:target=\"_blank\" rel=\"noopener noreferrer\" href='#arrow'><\/use>\n            <\/svg><\/a>                                            <\/div>\n            <\/div>\n<\/article>\n                <\/div>\n                                                <\/div>\n<\/section>\n\n\n<section\n    class=\"wp-block-accordion edwp-block layout--spacing-m-top layout--spacing-xxxl-bottom\"\n     id='login-faq'>\n    <div class=\"wp-block-accordion__container\">\n        <div class=\"wp-block-accordion__box\">\n            <div class=\"wp-component-content wp-component-content--default wp-component-content--centered wp-block-accordion__content fade-in\">\n            <h2 class=\"wp-component-heading text--h2 wp-component-content__title\">\n    Frequently Asked Questions<\/h2>                <\/div>            <div class=\"wp-block-accordion__items\">\n                <div class=\"wp-component-accordion-item row-load wp-component-accordion-item--default wp-component-accordion-item--overlap js-wp-component-accordion-item-group\">\n            <div class=\"wp-component-accordion-item__item js-wp-component-accordion-item-item\">\n                        <button\n                id=\"block_43b78111d345b8048dc3f87bfdc4cc12-accordion-summary-0\"\n                class=\"wp-component-accordion-item__title js-wp-component-accordion-item-title\"\n                type=\"button\"\n                aria-expanded=\"false\"\n                aria-controls=\"block_43b78111d345b8048dc3f87bfdc4cc12-accordion-0\">\n                <span class=\"wp-component-accordion-item__inner-title\">\n                                                            <span>What happens if I cannot log in?<\/span>\n                <\/span>\n                <div class=\"wp-component-accordion-item__toggle\">\n                    <svg class='edwp-icon edwp-icon--lrg js-icon wp-component-accordion-item__toggle__icon' aria-hidden='true'>\n                <use xlink:href='#chevron'><\/use>\n            <\/svg>                <\/div>\n            <\/button>\n            <div\n                id=\"block_43b78111d345b8048dc3f87bfdc4cc12-accordion-0\"\n                class=\"wp-component-accordion-item__content js-wp-component-accordion-item-content\"\n                aria-labelledby=\"block_43b78111d345b8048dc3f87bfdc4cc12-accordion-summary-0\"\n                role=\"region\">\n                <div class=\"wp-component-accordion-item__content__inner\">\n                    <div class=\"wp-component-accordion-item__content__box\">\n                        <div class=\"wp-component-paragraph wp-component-accordion-item__content-text\">\n    <p class=\"cmp-accordion__header\"><span style=\"font-family: Archivo, helvetica, arial, sans-serif; font-size: 18px;\">Use a different browser or a private window to log in if you have trouble. Check that you are using your Business Account username and password.<\/span><\/p>\n<div class=\"cmp-accordion__panel cmp-accordion__panel--expanded\" role=\"region\" data-cmp-hook-accordion=\"panel\" aria-hidden=\"false\">\n<div class=\"customContainer parbase\">\n<div id=\"container-345222674\" class=\"wsbg-spot container-345222674 image-div\">\n<div class=\"custom-container container\">\n<div class=\"aem-Grid aem-Grid--12 aem-Grid--default--12 \">\n<div class=\"businessRichtext parbase aem-GridColumn aem-GridColumn--default--12\">\n<p><b>Note:\u00a0<\/b>The email address that you received in the welcome email is your username. If you have more than one Business Account, use the one that matches the email address of the specific Portal welcome email.<\/p>\n<p>Find more information in\u00a0<a href=\"https:\/\/support.withsecure.com\/en\/support-articles\/getting-an-error-of-your-login-to-withsecure-partner-portal-failed-when-logging-into-partner-portal\/\">this support article<\/a>.<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n                                                                                            <\/div>\n                <\/div>\n            <\/div>\n        <\/div>\n            <div class=\"wp-component-accordion-item__item js-wp-component-accordion-item-item\">\n                        <button\n                id=\"block_43b78111d345b8048dc3f87bfdc4cc12-accordion-summary-1\"\n                class=\"wp-component-accordion-item__title js-wp-component-accordion-item-title\"\n                type=\"button\"\n                aria-expanded=\"false\"\n                aria-controls=\"block_43b78111d345b8048dc3f87bfdc4cc12-accordion-1\">\n                <span class=\"wp-component-accordion-item__inner-title\">\n                                                            <span>What happens if I need to change my password?<\/span>\n                <\/span>\n                <div class=\"wp-component-accordion-item__toggle\">\n                    <svg class='edwp-icon edwp-icon--lrg js-icon wp-component-accordion-item__toggle__icon' aria-hidden='true'>\n                <use xlink:href='#chevron'><\/use>\n            <\/svg>                <\/div>\n            <\/button>\n            <div\n                id=\"block_43b78111d345b8048dc3f87bfdc4cc12-accordion-1\"\n                class=\"wp-component-accordion-item__content js-wp-component-accordion-item-content\"\n                aria-labelledby=\"block_43b78111d345b8048dc3f87bfdc4cc12-accordion-summary-1\"\n                role=\"region\">\n                <div class=\"wp-component-accordion-item__content__inner\">\n                    <div class=\"wp-component-accordion-item__content__box\">\n                        <div class=\"wp-component-paragraph wp-component-accordion-item__content-text\">\n    <p class=\"cmp-accordion__header\">To reset your password, click on the Forgot your password link on the login page.<\/p>\n<div class=\"cmp-accordion__panel cmp-accordion__panel--expanded\" role=\"region\" data-cmp-hook-accordion=\"panel\" aria-hidden=\"false\">\n<div class=\"customContainer parbase\">\n<div id=\"container-322372853\" class=\"wsbg-spot container-322372853 image-div\">\n<div class=\"custom-container container\">\n<div class=\"aem-Grid aem-Grid--12 aem-Grid--default--12 \">\n<div class=\"businessRichtext parbase aem-GridColumn aem-GridColumn--default--12\">\n<p><b>Note<\/b>: Your new password will apply to all other WithSecure portals that you use.<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n                                                                                            <\/div>\n                <\/div>\n            <\/div>\n        <\/div>\n            <div class=\"wp-component-accordion-item__item js-wp-component-accordion-item-item\">\n                        <button\n                id=\"block_43b78111d345b8048dc3f87bfdc4cc12-accordion-summary-2\"\n                class=\"wp-component-accordion-item__title js-wp-component-accordion-item-title\"\n                type=\"button\"\n                aria-expanded=\"false\"\n                aria-controls=\"block_43b78111d345b8048dc3f87bfdc4cc12-accordion-2\">\n                <span class=\"wp-component-accordion-item__inner-title\">\n                                                            <span>Which credentials should I use to log in?<\/span>\n                <\/span>\n                <div class=\"wp-component-accordion-item__toggle\">\n                    <svg class='edwp-icon edwp-icon--lrg js-icon wp-component-accordion-item__toggle__icon' aria-hidden='true'>\n                <use xlink:href='#chevron'><\/use>\n            <\/svg>                <\/div>\n            <\/button>\n            <div\n                id=\"block_43b78111d345b8048dc3f87bfdc4cc12-accordion-2\"\n                class=\"wp-component-accordion-item__content js-wp-component-accordion-item-content\"\n                aria-labelledby=\"block_43b78111d345b8048dc3f87bfdc4cc12-accordion-summary-2\"\n                role=\"region\">\n                <div class=\"wp-component-accordion-item__content__inner\">\n                    <div class=\"wp-component-accordion-item__content__box\">\n                        <div class=\"wp-component-paragraph wp-component-accordion-item__content-text\">\n    <p class=\"cmp-accordion__header\">Log in to the portals with your Business Account credentials. Your email address is your username.<\/p>\n<div class=\"cmp-accordion__panel cmp-accordion__panel--expanded\" role=\"region\" data-cmp-hook-accordion=\"panel\" aria-hidden=\"false\">\n<div class=\"customContainer parbase\">\n<div id=\"container-314897331\" class=\"wsbg-spot container-314897331 image-div\">\n<div class=\"custom-container container\">\n<div class=\"aem-Grid aem-Grid--12 aem-Grid--default--12 \">\n<div class=\"businessRichtext parbase aem-GridColumn aem-GridColumn--default--12\">\n<p><b>Note:<\/b>\u00a0Use the Forgot your password link on the login page to reset your password.<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n                                                                                            <\/div>\n                <\/div>\n            <\/div>\n        <\/div>\n            <div class=\"wp-component-accordion-item__item js-wp-component-accordion-item-item\">\n                        <button\n                id=\"block_43b78111d345b8048dc3f87bfdc4cc12-accordion-summary-3\"\n                class=\"wp-component-accordion-item__title js-wp-component-accordion-item-title\"\n                type=\"button\"\n                aria-expanded=\"false\"\n                aria-controls=\"block_43b78111d345b8048dc3f87bfdc4cc12-accordion-3\">\n                <span class=\"wp-component-accordion-item__inner-title\">\n                                                            <span>What if I need to change two factor authentication (2FA) method?<\/span>\n                <\/span>\n                <div class=\"wp-component-accordion-item__toggle\">\n                    <svg class='edwp-icon edwp-icon--lrg js-icon wp-component-accordion-item__toggle__icon' aria-hidden='true'>\n                <use xlink:href='#chevron'><\/use>\n            <\/svg>                <\/div>\n            <\/button>\n            <div\n                id=\"block_43b78111d345b8048dc3f87bfdc4cc12-accordion-3\"\n                class=\"wp-component-accordion-item__content js-wp-component-accordion-item-content\"\n                aria-labelledby=\"block_43b78111d345b8048dc3f87bfdc4cc12-accordion-summary-3\"\n                role=\"region\">\n                <div class=\"wp-component-accordion-item__content__inner\">\n                    <div class=\"wp-component-accordion-item__content__box\">\n                        <div class=\"wp-component-paragraph wp-component-accordion-item__content-text\">\n    <div class=\"cmp-accordion__panel cmp-accordion__panel--expanded\" role=\"region\" data-cmp-hook-accordion=\"panel\" aria-hidden=\"false\">\n<div class=\"customContainer parbase\">\n<div id=\"container-752971616\" class=\"wsbg-spot container-752971616 image-div\">\n<div class=\"custom-container container\">\n<div class=\"aem-Grid aem-Grid--12 aem-Grid--default--12 \">\n<div class=\"businessRichtext parbase aem-GridColumn aem-GridColumn--default--12\">\n<ol>\n<li>Log in to the Elements Security Center<\/li>\n<li>Click on the user icon in the top-right corner<\/li>\n<li>Select\u00a0<b>My Settings<\/b><\/li>\n<li>Click on the\u00a0<b>Change\u00a0<\/b>button on the right side of the\u00a0<i>Multi-Factor Authentication Enabled\u00a0<\/i>text<\/li>\n<\/ol>\n<p>Here you can remove current 2 factor authentication methods and add new ones. We recommend to have multiple methods enabled so that if for example your device with the authenticator app is lost, you can use another method to still log in and change settings.<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n                                                                                            <\/div>\n                <\/div>\n            <\/div>\n        <\/div>\n            <div class=\"wp-component-accordion-item__item js-wp-component-accordion-item-item\">\n                        <button\n                id=\"block_43b78111d345b8048dc3f87bfdc4cc12-accordion-summary-4\"\n                class=\"wp-component-accordion-item__title js-wp-component-accordion-item-title\"\n                type=\"button\"\n                aria-expanded=\"false\"\n                aria-controls=\"block_43b78111d345b8048dc3f87bfdc4cc12-accordion-4\">\n                <span class=\"wp-component-accordion-item__inner-title\">\n                                                            <span>What if I lost access to my second factor authentication method (2FA) unexpectedly?<\/span>\n                <\/span>\n                <div class=\"wp-component-accordion-item__toggle\">\n                    <svg class='edwp-icon edwp-icon--lrg js-icon wp-component-accordion-item__toggle__icon' aria-hidden='true'>\n                <use xlink:href='#chevron'><\/use>\n            <\/svg>                <\/div>\n            <\/button>\n            <div\n                id=\"block_43b78111d345b8048dc3f87bfdc4cc12-accordion-4\"\n                class=\"wp-component-accordion-item__content js-wp-component-accordion-item-content\"\n                aria-labelledby=\"block_43b78111d345b8048dc3f87bfdc4cc12-accordion-summary-4\"\n                role=\"region\">\n                <div class=\"wp-component-accordion-item__content__inner\">\n                    <div class=\"wp-component-accordion-item__content__box\">\n                        <div class=\"wp-component-paragraph wp-component-accordion-item__content-text\">\n    <p class=\"cmp-accordion__header\"><span style=\"font-family: Archivo, helvetica, arial, sans-serif; font-size: 18px;\">In case of breaking or losing device which served as authentication method for your account, please follow this guide.<\/span><\/p>\n<div class=\"cmp-accordion__panel cmp-accordion__panel--expanded\" role=\"region\" data-cmp-hook-accordion=\"panel\" aria-hidden=\"false\">\n<div class=\"customContainer parbase\">\n<div id=\"container-751983744\" class=\"wsbg-spot container-751983744 image-div\">\n<div class=\"custom-container container\">\n<div class=\"aem-Grid aem-Grid--12 aem-Grid--default--12 \">\n<div class=\"businessRichtext parbase aem-GridColumn aem-GridColumn--default--12\">\n<p><a href=\"https:\/\/support.withsecure.com\/en\/support-articles\/how-to-reset-two-factor-authentication-2fa-for-a-withsecure-business-account-elements-partner-portal-eservice-portal-user-account\/\">How to reset two factor authentication (2FA) for a WithSecure Business Account (Elements, Partner Portal, eService Portal) user account<\/a><\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n                                                                                            <\/div>\n                <\/div>\n            <\/div>\n        <\/div>\n    <\/div>\n                            <\/div>\n                    <\/div>\n    <\/div>\n<\/section>\n\n\n<section\n    class=\"wp-block-one-column-block edwp-block js-wp-block-one-column-block wp-block-one-column-block--content-1 layout--none-top layout--none-bottom\"\n    >\n    <div class=\"wp-block-one-column-block__container\">\n                                                                                                                            <h3 class=\"wp-component-heading text--h3 wp-block-one-column-block__heading fade-in\">\n    Latest announcements<\/h3>                                                                                <\/div>\n<\/section>\n\n\n<section\n    class=\"wp-block-content-list edwp-block layout--spacing-l-top layout--spacing-l-bottom\"\n    >\n    <div class=\"wp-block-content-list__container\">\n        \n        <div class=\"wp-block-content-list__main\">\n                    <ul class=\"wp-block-content-list__list\">\n            <li class=\"wp-block-content-list__item\">\n                            <time class=\"wp-block-content-list__updated\" datetime=\"2026-11-02T13:56:18+00:00\">November 2, 2026<\/time>\n            \n            <a class=\"wp-block-content-list__link\" href=\"https:\/\/support.withsecure.com\/en\/announcements\/delays-in-elements-collaboration-protection-scanning\/\">\n                <p class=\"wp-block-content-list__title\">Delays in Elements Collaboration Protection scanning<\/p>\n            <\/a>\n\n            \n                            <details class=\"wp-block-content-list__details\">\n                    <summary class=\"wp-block-content-list__summary\">Read more<\/summary>\n                    <div class=\"wp-component-paragraph wp-block-content-list__body entry__body\">\n    <p>Between the morning of 30 October and 2 November, an issue affected email scanning for a subset of mailboxes.<\/p>\n<p>During this period, approximately 1 in 128 mailboxes did not receive email scanning as expected. As mailboxes are distributed across the service, organizations with a larger number of mailboxes were more likely to have some users affected.<\/p>\n<p>During the affected period, email scanning was disrupted for a subset of emails, resulting in some scans being missed or delayed.<\/p>\n<p>The issue was identified and resolved on the morning of 2 November.<\/p>\n<\/div>\n                <\/details>\n                    <\/li>\n            <li class=\"wp-block-content-list__item\">\n                            <time class=\"wp-block-content-list__updated\" datetime=\"2026-10-19T07:01:03+00:00\">October 19, 2026<\/time>\n            \n            <a class=\"wp-block-content-list__link\" href=\"https:\/\/support.withsecure.com\/en\/announcements\/new-roles-for-better-access-control-in-elements\/\">\n                <p class=\"wp-block-content-list__title\">New roles for better access control in Elements<\/p>\n            <\/a>\n\n            \n                            <details class=\"wp-block-content-list__details\">\n                    <summary class=\"wp-block-content-list__summary\">Read more<\/summary>\n                    <div class=\"wp-component-paragraph wp-block-content-list__body entry__body\">\n    <p>We are introducing new Elements roles. New roles make it easier to manage access in the Elements portal.<\/p>\n<ul>\n<li><strong>Endpoints: Reading all<\/strong> - read access to servers, workstations and mobile devices. Does not grant permission to Device or profile management, Patch management, Device security posture, Software reputation, Security Events, Home\/Endpoint protection, Reports.<\/li>\n<li><strong>Endpoints: Editing all<\/strong> - editing access to servers, workstations, and mobile devices. Grants permission to security information, including device status, dashboard, security events, and software updates. Allows executing security operations such as removing or isolating devices and assigning profiles. Does not grant permission to manage profiles.<\/li>\n<li><strong>Endpoints: Editing non-servers<\/strong> - edit access to workstations and mobile devices; read access to servers. Grants access to workstation and mobile security information, including device status, dashboards, security events, and software updates. Allows security operations on workstations and mobile devices, such as removing or isolating them and assigning profiles. Does not permit profile management.<\/li>\n<li><strong>Endpoints: Editing servers<\/strong> - edit access to servers; read access to workstations and mobile devices. Grants access to server security information, including device status, dashboards, security events, and software updates. Allows security operations on servers, such as removing or isolating them and assigning profiles. Does not permit profile management.<\/li>\n<li><strong>Endpoints: Organizing non-servers<\/strong> - Edit access to non-server devices, excluding remote operations. Includes actions that affect device security configuration (e.g., profile assignment) or metadata (e.g., alias, label, asset group), but not actions that execute on the device itself. Also includes read access to devices, security events, profiles, and reports for servers, workstations, and mobile devices.<\/li>\n<li><strong>Endpoints: Organizing servers<\/strong> - edit access to server devices, excluding remote operations. Includes actions that affect device security configuration (e.g., profile assignment) or metadata (e.g., alias, label, asset group), but not actions that execute on the device itself. Also includes read access to devices, security events, profiles, and reports for servers, workstations, and mobile devices.<\/li>\n<li><strong>Endpoints: Non-server remote operations<\/strong> - allows execution of remote security operations on non-servers, such as removing or isolating devices. Includes read access to devices, security events, profiles, and reports for servers, workstations, and mobile devices.<\/li>\n<li><strong>Endpoints: Server remote operations<\/strong>  - allows execution of remote security operations on servers, such as removing or isolating devices. Includes read access to devices, security events, profiles, and reports for servers, workstations, and mobile devices. <\/li>\n<li><strong>Profiles: Editing for non-servers<\/strong> - allows management of security configurations and profiles for workstations and mobile devices. Does not permit access to server profiles.<\/li>\n<li><strong>Profiles: Editing for servers<\/strong> - allows management of security configurations and profiles for servers. Does not permit access to workstation or mobile device profiles.<\/li>\n<li><strong>Profile assignment rules: Editing <\/strong>- allows management of profile assignment rules.<\/li>\n<li><strong>Security events: Managing<\/strong> - grants permission to take action on security events (e.g., acknowledging or allowing a website URL). Includes read access to devices, security events, profiles, and reports for servers, workstations, and mobile devices.<\/li>\n<li><strong>Reports: Managing<\/strong> - allows managing reports. Includes read access to devices, security events, profiles, and reports for servers, workstations, and mobile devices.<\/li>\n<\/ul>\n<\/div>\n                <\/details>\n                    <\/li>\n            <li class=\"wp-block-content-list__item\">\n                            <time class=\"wp-block-content-list__updated\" datetime=\"2026-10-14T10:21:20+00:00\">October 14, 2026<\/time>\n            \n            <a class=\"wp-block-content-list__link\" href=\"https:\/\/support.withsecure.com\/en\/announcements\/why-incident-response-matters\/\">\n                <p class=\"wp-block-content-list__title\">Why incident response matters?<\/p>\n            <\/a>\n\n            \n                            <details class=\"wp-block-content-list__details\">\n                    <summary class=\"wp-block-content-list__summary\">Read more<\/summary>\n                    <div class=\"wp-component-paragraph wp-block-content-list__body entry__body\">\n    <p>When a cyber incident affects your business, you need to decide which systems can keep running and what is safe to restore. You also need to understand whether sensitive information has been exposed and whether the attacker still has access. Those decisions depend on a reliable picture of what happened.<\/p>\n<p><strong>Digital forensics and incident response (DFIR) provides the expertise to establish those facts and act on them.<\/strong>Experienced investigators and responders help contain the incident, guide recovery and address the weaknesses that allowed the attack. For your organization, this can mean less disruption, better-informed decisions and less pressure on internal teams.<\/p>\n<h4 data-id=\"building-on-your-existing-security-investment\">Building on your existing security investment<\/h4>\n<p>Endpoint detection and response (EDR) provides visibility into device activity and tools to investigate and contain threats. Managed detection and response (MDR) adds experts who monitor, investigate and respond within an agreed scope.<\/p>\n<p>These capabilities are valuable during an incident. A dedicated DFIR team builds on that work when the situation requires deeper forensic investigation, coordination across a wider environment or additional recovery support. Investigators bring together evidence from endpoints, identities, cloud services and other systems to establish the extent of the compromise and guide the next decisions.<\/p>\n<h4 data-id=\"what-dfir-can-uncover\">What DFIR can uncover<\/h4>\n<p>The following illustrative scenarios show why that wider investigation matters.<\/p>\n<p><strong>The fraudulent invoice inside a trusted conversation:<\/strong>\u00a0A finance team receives new bank details within an existing supplier email conversation. The payment looks legitimate until the supplier calls to ask where it is. DFIR investigators uncover a compromised mailbox that the attacker used to monitor payment discussions. They identify affected conversations and hidden forwarding rules, helping the company secure its accounts, support bank enquiries and assess what information was exposed.<\/p>\n<p><strong>The ransomware incident that started days before the outage:<\/strong>\u00a0EDR detects ransomware and isolates the affected server. Investigation reveals earlier use of a compromised administrator account and additional access to a backup server. DFIR responders identify the remaining access routes, assess evidence of data theft and help determine which backups can be trusted. Recovery can then address the wider compromise, reducing the risk of reconnecting systems while the attacker retains access.<\/p>\n<p><strong>The quiet intrusion targeting valuable information:<\/strong>\u00a0Business continues normally while an intruder spends weeks accessing sensitive project files. An unusual sign-in prompts an investigation that connects activity across workstations and cloud services. DFIR specialists reconstruct the timeline, uncover mechanisms used to maintain access and assess evidence of data collection and transfer. The organization gains a clearer understanding of the exposure and a plan to remove the intruder.<\/p>\n<h4 data-id=\"evidence-for-decisions-reporting-and-recovery\">Evidence for decisions, reporting and recovery<\/h4>\n<p>Even after an attacker has caused damage, effective response can prevent further loss and protect unaffected operations. Experienced responders help prioritize actions according to business impact while preserving evidence needed for the investigation.<\/p>\n<p>Clear reporting gives management a factual basis for decisions. It also supports\u00a0<strong>cyber insurance claims and regulatory reporting<\/strong>\u00a0through documented timelines, findings on affected systems and data, and records of response actions. Legal and compliance teams can use these findings to assess notification obligations and prepare reports under NIS2 and GDPR, where applicable. Reports distinguish confirmed findings from assessments and explain any remaining uncertainty.<\/p>\n<h4 data-id=\"expertise-available-when-you-need-it\">Expertise available when you need it<\/h4>\n<p>At WithSecure,\u00a0<strong>our incident response team is completely technology agnostic<\/strong>. We work across vendors, platforms and environments, alongside your existing teams and providers. Our investigations cover business email compromise, ransomware, cyber espionage and insider threats. Or any other needs.<\/p>\n<p>A WithSecure DFIR retainer provides\u00a0<strong>24\/7, SLA-backed access to specialists<\/strong>, with services available on demand at pre-agreed rates and no requirement to pre-purchase investigation days. Your organization has an established contact and activation process, reducing the time spent arranging expert support during an incident. Internal teams gain additional capacity when demands on them are greatest.<\/p>\n<p>We also help you prepare through\u00a0<strong>custom tabletop exercises, runbooks and plan reviews<\/strong>, covering incident response, crisis management and recovery. Each engagement reflects your environment, business priorities and team responsibilities. Your people can practise difficult decisions, test escalation routes and address gaps before a real incident puts those arrangements under pressure.<\/p>\n<p>The result is an organization better prepared to understand an incident, make informed decisions and restore operations with confidence grounded in evidence.<\/p>\n<p>Read more about our Incident response services from here: <\/p>\n<div class=\"js-embed embedResponsive\">\n    <a href=\"https:\/\/www.withsecure.com\/en\/experiencing-a-breach\/\" rel=\"nofollow noopener ugc\" target=\"_blank\"><\/p>\n<blockquote class=\"wp-embedded-content\" data-secret=\"5Gt4wNoUik\"><p><a href=\"https:\/\/www.withsecure.com\/en\/experiencing-a-breach\/\" target=\"_blank\" rel=\"noopener\">Experiencing a breach<\/a><\/p><\/blockquote>\n<p><iframe loading=\"lazy\" class=\"wp-embedded-content\" sandbox=\"allow-scripts\" security=\"restricted\" style=\"position: absolute; visibility: hidden;\" title=\"&#8220;Experiencing a breach&#8221; &#8212; WithSecure\u2122\" src=\"https:\/\/www.withsecure.com\/en\/experiencing-a-breach\/embed\/#?secret=N9t2BjMFT7#?secret=5Gt4wNoUik\" data-secret=\"5Gt4wNoUik\" width=\"500\" height=\"282\" frameborder=\"0\" marginwidth=\"0\" marginheight=\"0\" scrolling=\"no\"><\/iframe><br \/>\n    <\/a>\n<\/div>\n<\/div>\n                <\/details>\n                    <\/li>\n    <\/ul>\n\n                            <\/div>\n    <\/div>\n<\/section>\n","protected":false},"excerpt":{"rendered":"","protected":false},"author":12,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"footnotes":""},"class_list":["post-2668","page","type-page","status-publish","hentry"],"acf":[],"_links":{"self":[{"href":"https:\/\/support.withsecure.com\/en\/wp-json\/wp\/v2\/pages\/2668","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/support.withsecure.com\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/support.withsecure.com\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/support.withsecure.com\/en\/wp-json\/wp\/v2\/users\/12"}],"replies":[{"embeddable":true,"href":"https:\/\/support.withsecure.com\/en\/wp-json\/wp\/v2\/comments?post=2668"}],"version-history":[{"count":18,"href":"https:\/\/support.withsecure.com\/en\/wp-json\/wp\/v2\/pages\/2668\/revisions"}],"predecessor-version":[{"id":9406,"href":"https:\/\/support.withsecure.com\/en\/wp-json\/wp\/v2\/pages\/2668\/revisions\/9406"}],"wp:attachment":[{"href":"https:\/\/support.withsecure.com\/en\/wp-json\/wp\/v2\/media?parent=2668"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}