Helsinki, Finland – January 2026 — WithSecure™, widely respected as a global leader in Salesforce security, today announced the launch of its Federal Risk and Authorization Management Program (FedRAMP®) preparation initiative for WithSecure Cloud Protection for Salesforce. This effort is supported by federal compliance advisory firm 38North Security.
This move signals WithSecure’s strategic commitment to bringing its Salesforce-native, real-time threat protection to U.S. federal agencies and preparing to meet the government’s rigorous cloud security standards.
“Beginning our FedRAMP preparation underscores our long-term commitment to serving U.S. federal entities and strengthening the security of their Salesforce environments,” said Juhana Autio, General Manager of WithSecure Cloud Protection for Salesforce. “Our goal is to make enterprise-grade, in-platform solution easily available to federal agencies so they can safeguard the workloads and mission-critical services they run in Salesforce.”
FedRAMP provides a standardized, government-wide security framework for cloud products used by federal agencies, based on NIST SP 800-53 security controls. Completing the preparation phase positions WithSecure to pursue the formal FedRAMP authorization process, which would enable government-wide reuse under the program’s “do once, use many times” model.As a leader in guiding global technology companies through the most demanding compliance landscapes—particularly within the U.S. public sector—we’re thrilled to support WithSecure on their FedRAMP journey,” said Matthew Earley, President and Founder of 38North Security. “38North Security has consistently delivered secure, resilient cloud environments for organizations across the United States, Europe, and the Asia-Pacific region. As we continue expanding our presence in the European Union, this partnership represents a natural alignment of strengths and opens new opportunities for both companies on both sides of the Atlantic. WithSecure’s platform is exceptionally well-positioned to meet the needs of federal agencies relying on Salesforce for mission-critical operations.”
WithSecure Cloud Protection for Salesforce delivers enterprise-grade, real-time threat detection through deep inspection and advanced threat intelligence, protecting against malware, zero-day file threats, phishing links, malicious URLs, QR-based attacks, and identity risks such as compromised Salesforce user credentials. These capabilities are already trusted by highly regulated industries and public sector organizations globally to defend against complex attack chains that target users, content, and automations inside Salesforce.
About WithSecure™
WithSecure™ is Europe’s cyber security partner of choice. Trusted by IT service providers, MSSPs, and businesses worldwide, we deliver outcome-based cyber security solutions that protect mid-market companies. Committed to the European Way of data protection, WithSecure prioritizes privacy, data sovereignty, and regulatory compliance.
Boasting more than 35 years of industry experience, WithSecure™ has designed its portfolio to navigate the paradigm shift from reactive to proactive cyber security. In alignment with its commitment to collaborative growth, WithSecure™ offers partners flexible commercial models, ensuring mutual success across the dynamic cyber security landscape.
Central to WithSecure’s™ cutting-edge offering is Elements Cloud, which seamlessly integrates AI-powered technologies, human expertise, and co-security services. Further, it empowers mid-market customers with modular capabilities spanning endpoint and cloud protection, threat detection and response, and exposure management.
WithSecure Cloud Protection for Salesforce provides Salesforce-native protection against malware, phishing, and identity-based threats, securing Salesforce users and agentic AI workflows in real time.
Learn more at cloudprotection.com.
About 38North Security
38North Security is one of the industry’s premier cloud security and compliance consultancies, trusted by leading SaaS providers and global enterprises looking to break into—or expand within—the U.S. public sector. From FedRAMP and DoD IL4/IL5 to CMMC, IRAP, DORA, and ISMAP, 38North Security helps organizations accelerate market entry, reduce authorization friction, and build resilient, scalable cloud environments that stand up to the world’s toughest regulatory standards.
Backed by a world-class team and our flagship LaunchPad ATO-acceleration platform, 38North Security delivers the strategy, engineering expertise, and hands-on support needed to turn complex compliance challenges into competitive advantage. Our clients span Fortune 500 companies, high-growth SaaS innovators, and mission-critical technology providers across North America, Europe, APAC, and beyond.
At 38North Security, we believe compliance should be a catalyst for growth—not a barrier. We empower customers to enter new markets with confidence, speed, and a secure-by-design foundation that scales.
Speak to a FedRAMP and cybersecurity expert today. Get in touch with our team.
Read the original release here.


