WithSecure demonstrates strong detection-to-alert performance in 2025 MITRE ATT&CK® evaluation for modern IT environments

WithSecure media relations

WithSecure PR

WithSecure has once again demonstrated robust performance with a detection-to-alert ratio that reinforces its commitment to delivering effective, low-noise protection for mid-sized organizations and managed service providers (MSPs) facing advanced cyber threats in modern IT environments.

WithSecure™, Europe’s trusted cybersecurity partner, continues to demonstrate strong performance for pragmatic, high-fidelity detection in the 7th MITRE ATT&CK® Evaluations for enterprise security solutions. This year’s evaluation marks a significant evolution, with WithSecure once again excelling in detection-to-alert ratio in modern IT environments – delivering actionable alerts without overwhelming security teams with noise.

WithSecure is one of only two vendors to have participated in every MITRE ATT&CK evaluation for enterprises that focuses on detecting emulated cyber attacks by threat actor groups, underscoring a long-term commitment to transparency and independent testing. In addition, WithSecure actively contributes to European cooperation on threat intelligence, reinforcing the value of cross-border collaboration in cybersecurity.

This year’s evaluation featured multi-faceted intrusions, including social engineering, cloud exploitation, identity abuse, and “living off the land” techniques. MITRE offered two distinct adversary focus areas, simulating both financially motivated cyber criminals and state-sponsored espionage groups.

This is the second time MITRE’s enterprise evaluation measures alert volumes and false positives, making the results more relevant for real-world operations – especially for organizations with limited security resources. WithSecure™ Elements Extended Detection and Response (XDR) demonstrated both high detection coverage and low alert volume, generating a small number of high-fidelity alerts that matter to security teams. This balance is critical for mid-market companies and managed service providers (MSPs), where wrong technology choice can lead to excessive noise and overwhelm small teams.

“The 2025 MITRE ATT&CK Evaluations is a new benchmark for XDR solutions in modern IT environments involving cloud platforms, like Amazon Web Services. WithSecure’s continued focus on actionable detection, low noise, and transparency ensures that organizations with limited resources can make informed cybersecurity investments without overburdening their teams,” says Leszek Tasiemski, VP, R&D Elements Cloud at WithSecure.

“The impact of excessive alerts on workload is most significant for smaller security teams. WithSecure’s approach with AI-based Broad Context Detection™ technology ensures that IT security teams can prioritize genuine threats and manage their workload effectively when delivering enterprise-grade security without enterprise-grade complexity or cost.”

For more information, visit www.withsecure.com/en/expertise/campaigns/mitre-2025

Why organisations choose WithSecure

WithSecure combines advanced technology with genuine human expertise to protect what matters most. Whether you are securing a growing business or a complex organisation, we work alongside your team to deliver outcomes that last.

How it works

  1. Complete this form
  2. We will review your enquiry and be in touch
  3. Get the support or information you need

The Benefits

  • Fast, frictionless deployment. Our single-agent setup minimises disruption and delivers effective protection from day one.
  • A unified platform that scales with you. Endpoint, identity, cloud, and collaboration security in one place – no unnecessary complexity, no tool sprawl.
  • Compliance built in, not bolted on. NIS2, GDPR, and DORA alignment are embedded in the platform, turning regulatory requirements into a competitive advantage.
  • Round-the-clock expertise, whenever you need it. Every alert is handled by a security professional who understands the full context of your environment.
  • Security grounded in European values. Established in Finland in 1988 and operating fully under EU jurisdiction, our commitment to privacy and trust is structural, not cosmetic.
  • From reactive to proactive. Exposure Management and AI-powered threat detection identify and address risks before they become incidents.
  • A long-term security partner. We begin with a focused conversation and remain invested in your organisation’s security posture well beyond initial onboarding.




















This site is registered on wpml.org as a development site. Switch to a production site key to remove this banner.