Safeguard Docs
Compliance ConnectorsSetup by categoryEndpoint Detection & Response

WithSecure

Connect WithSecure to Safeguard: what it provides, how to set it up, and the frameworks it provides evidence for.

Connect WithSecure to collect endpoint detection & response evidence with automated compliance tests, switched on per workspace.

CategoryEndpoint Detection & Response
Connect withAPI token
What a connection producesAutomated compliance tests
WithSecure's guideconnect.withsecure.com

Connect with an API token

  1. In WithSecure:

    1. Sign in to WithSecure Elements Security Center as an EPP administrator. Under Management, select Organization Settings, then select API clients from the menu at the top.
    2. From the scope selector, change your scope to the organization for which you want to create credentials, then select Add new.
    3. Enter a description such as Safeguard, select Read-only so the client can only read data (scope connect.api.read), and select Add.
    4. Copy the Client ID and secret, select I have copied and stored the secret, and then select Done.

    Where to find the other values:

    • Client ID: Shown with the secret when the API client is created.

    WithSecure shows the secret only once, so copy it before you leave the page.

    Source: connect.withsecure.com, checked 2026-10-07.

    The permissions Safeguard needs: connect.api.read.

  2. On Compliance › Connectors, open WithSecure, click Connect, choose API token and fill in:

    FieldWhat to enter
    Client IDRequired.
    Client secretRequired. Stored encrypted and never shown again.
    Organization ID (optional)—
  3. Click Connect with token.

Frameworks

Safeguard's automated tests read WithSecure and map to the controls below. When a test passes, the result is evidence toward each control it maps to, in every framework listed. It is evidence toward a control, not proof that the control is met on its own.

FrameworkEvidenceControlsTests
SOC2Automated testsCC6.8, CC7.2, CC7.3, CC7.45
ISO/IEC 27001Automated testsA.5.26, A.8.1, A.8.7, A.8.165
HIPAA Security RuleAutomated tests164.308(a)(5), 164.308(a)(6)5
PCI DSSAutomated tests5.2.1, 5.3.1, 12.10.15
NIST CSF 2.0Automated testsDE.AE-02, DE.CM-09, PR.PS-01, RS.MI-025

These tests are switched on per workspace by the Safeguard team.

On this page