Cloud Protection for Salesforce becomes an independent company, spinning off from WithSecure to focus exclusively on Salesforce security

Already run as a standalone unit for several years, Cloud Protection becomes a dedicated Salesforce security company; WithSecure sharpens its focus on its core Elements platform

HELSINKI, Finland – September 1, 2026: WithSecure today announced the demerger of Cloud Protection for Salesforce, its Salesforce security business, into an independent company. Operating as Cloud Protection by WithSecure, the new company will focus exclusively on protecting Salesforce environments from malware, phishing, and data-borne threats, while WithSecure concentrates on a unified proactive security platform for managed service providers (MSPs) and value-added distributors (VADs) – covering endpoint, identity, cloud, and collaboration security, plus Exposure Management and AI-powered MDR. The demerger involves no change in ownership.

Cloud Protection for Salesforce has operated as a highly autonomous business unit within WithSecure for years, building its own product, go-to-market, and customer success functions. In that time, it has established itself as the leading Salesforce-native security solution, trusted by organizations including Rolls-Royce Financing, Coca-Cola Bottlers, and Yahoo.

As a standalone company, Cloud Protection will be able to dedicate its full resources, roadmap, and investment to Salesforce security – while WithSecure sharpens its focus on its core cybersecurity offering.

“Cloud Protection has proven it can grow and compete as an independent business, and this demerger simply reflects that reality. Spinning it out lets both companies concentrate fully on what they do best – WithSecure on its core Elements platform, and Cloud Protection on being the definitive security layer for Salesforce,” said Antti Koskela, CEO of WithSecure.

“The Salesforce ecosystem and threat landscape are changing faster than ever as cyber attackers embrace AI and businesses shift to Agentforce and Headless360. Becoming an independent company allows us to move even faster and invest with total focus on ensuring businesses and their customers stay protected on Salesforce,” said Juhana Autio, General Manager of Cloud Protection.

For customers, the transition changes nothing about the product, support, or relationships they rely on today. Existing contracts, service levels, and points of contact remain in place. If anything, customers can expect an even more dedicated and responsive partner going forward, as Cloud Protection channels its full attention into Salesforce security.

Cloud Protection will continue to operate from its Helsinki base, with teams across North America, EMEA, and APAC, and will continue to be available directly and via Salesforce AgentExchange.

About Cloud Protection

Cloud Protection offers enterprise-grade security for Salesforce environments, trusted by organizations worldwide including Fortune 500 enterprises and government agencies such as Rolls-Royce Financing, Coca-Cola Bottlers, and Yahoo.

Its Salesforce-native solution scans every file, link, identity, and Agentforce workflow in real time – stopping the malware, phishing, and identity-based threats that built-in platform tools and traditional email security miss, without altering customers’ existing configurations. Learn more at cloudprotection.com.

About WithSecure

Founded in 1988, WithSecure is Europe’s cybersecurity partner of choice. Trusted by MSPs, value added distributors, and businesses worldwide, we deliver cybersecurity solutions that protect mid-market companies. Committed to the European Way of data protection, WithSecure prioritizes privacy, digital sovereignty, and regulatory compliance.

Boasting more than 35 years of industry experience, WithSecure has designed its portfolio to navigate the paradigm shift from reactive to proactive cybersecurity.

Central to WithSecure’s cutting-edge offering is Elements Cloud, which seamlessly integrates AI-powered technologies, human expertise, and co-security services. Further, it empowers mid-market customers with modular capabilities spanning endpoint and cloud protection, threat detection and response, and exposure management.