Since the 1980s, debates on security have expanded and security has become a catchphrase in virtually every area of life. In Finland, the government elected in 2003 began its four-year period in power by launching a special Internal Security Programme (ISP) that stressed the threat of social exclusion. Altogether four ISPs have been launched in Finland since 2004. They all repeat the menace of social exclusion. In this article, we examine how these speech acts materialised on the level of legislation. Our study suggests that in Finland, the securitization of exclusion was only accepted in the media. Overall it ‘failed’, as on the level of law, internal security and exclusion were not, in the main, connected when security measures were justified. On the other hand, we contend that by introducing more monitoring and less privacy – especially among youth – the legislation effectively opened novel avenues for ‘security nothings’.