List of Microsoft Defender for Endpoint (MDE) Customers
Microsoft
One Microsoft Way,
Redmond, 98052-6399, WA,
United States
Redmond, 98052-6399, WA,
United States
1 425-882-8080
Professional Services
228000
$320.0B
Since 2010, our global team of researchers has been studying Microsoft Defender for Endpoint (MDE) customers around the world, aggregating massive amounts of data points that form the basis of our forecast assumptions and perhaps the rise and fall of certain vendors and their products on a quarterly basis.
Each quarter our research team identifies companies that have purchased Microsoft Defender for Endpoint (MDE) for Endpoint Detection and Response (EDR) from public (Press Releases, Customer References, Testimonials, Case Studies and Success Stories) and proprietary sources, including the customer size, industry, location, implementation status, partner involvement, LOB Key Stakeholders and related IT decision-makers contact details.
Companies using Microsoft Defender for Endpoint (MDE) for Endpoint Detection and Response (EDR) include: Loacker, a Italy based Consumer Packaged Goods organisation with 1143 employees and revenues of $480.0 million, SIAE Microelettronica, a Italy based Manufacturing organisation with 1600 employees and revenues of $400.0 million, Eternoo Italy, a Italy based Distribution organisation with 665 employees and revenues of $255.0 million, Sogin, a Italy based Oil, Gas and Chemicals organisation with 1000 employees and revenues of $212.0 million, European University Institute, a Italy based Education organisation with 1100 employees and revenues of $105.0 million and many others.
Contact us if you need a completed and verified list of companies using Microsoft Defender for Endpoint (MDE), including the breakdown by industry (21 Verticals), Geography (Region, Country, State, City), Company Size (Revenue, Employees, Asset) and related IT Decision Makers, Key Stakeholders, business and technology executives responsible for the software purchases.
The Microsoft Defender for Endpoint (MDE) customer wins are being incorporated in our Enterprise Applications Buyer Insight and Technographics Customer Database which has over 100 data fields that detail company usage of software systems and their digital transformation initiatives. Apps Run The World wants to become your No. 1 technographic data source!
Apply Filters For Customers
| Logo | Customer | Industry | Empl. | Revenue | Country | Vendor | Application | Category | When | SI | Insight |
|---|---|---|---|---|---|---|---|---|---|---|---|
 |
Arpa Industriale | Manufacturing | 200 | $67M | Italy | Microsoft | Microsoft Defender for Endpoint (MDE) | Endpoint Detection and Response (EDR) | 2019 | n/a |
In 2019, Arpa Industriale deployed Microsoft Defender for Endpoint (MDE) as its Endpoint Detection and Response (EDR) solution. Arpa Industriale is a 200 employee Italian manufacturing company with corporate and European offices, and the MDE deployment followed the company move to Windows Defender as the corporate endpoint protection baseline.
The implementation configured Microsoft Defender for Endpoint to deliver continuous endpoint telemetry, behavioral threat detection, centralized alerting, and automated response orchestration across Windows user and server endpoints. Configuration emphasized centralized console management, sensor rollout to corporate endpoints, EDR investigation workflows, and automated containment capabilities to support security operations processes.
Microsoft Defender for Endpoint was operated alongside a broader security stack that included network segmentation using Cisco switches and Fortigate firewalls, Network Access Control via Forescout for wired network and OT device inventory and control, Privileged Access Management through Safeguard by OneIdentity, SAP identity and authorization controls, Netwrix for logging and analysis, Darktrace for network and mail AI detection, KnowBe4 phishing simulation and training, Microsoft Authenticator for multi factor authentication, and Exchange Online for corporate email. The deployment sat within an environment that also implemented wireless coverage of production areas, internal vulnerability assessments, external penetration testing, and network rack upgrades to raise physical and logical security levels.
Governance and process changes accompanied the technical deployment, including formal IS based IT procedures, phishing simulation campaigns and corporate cyber security training, definition of employee identity lifecycle rules through SAP IDM and One Identity, and privileged access approval workflows that removed direct RDP access to servers. Corrective actions resulting from vulnerability assessments and penetration tests, plus iterative cyber attack simulations and consequent improvement actions, were executed as part of the ongoing security evolution alongside Microsoft Defender for Endpoint.
|
 |
Bit | Professional Services | 200 | $20M | Italy | Microsoft | Microsoft Defender for Endpoint (MDE) | Endpoint Detection and Response (EDR) | 2021 | n/a |
In 2021, Bit deployed Microsoft Defender for Endpoint (MDE) as its Endpoint Detection and Response (EDR) solution across corporate endpoints. The Bit Microsoft Defender for Endpoint (MDE) Endpoint Detection and Response (EDR) implementation was positioned to support security operations and IT system administration for a 200 employee Professional Services firm in Italy, and was provisioned as part of an existing Microsoft-centric infrastructure.
The Microsoft Defender for Endpoint implementation emphasized core EDR capabilities, including endpoint telemetry collection, threat detection and investigation workflows, automated investigation and remediation, and policy-driven response. Configuration work included tuning detection rules, establishing automated response playbooks, and aligning endpoint policy profiles with device management practices to standardize incident handling and device hardening.
MDE was integrated with Microsoft Intune for device enrollment and policy enforcement, with Microsoft Defender for Cloud to consolidate cross-layer security telemetry, and with Office 365 to ingest user and email security signals. Operational ownership resides with the Technical Leader and System Administrator who oversee user and group management, device configuration, and security settings across Microsoft Azure, Office 365, Microsoft Intune, and Defender for Cloud.
Governance and rollout were driven by the Technical Leader, who defined implementation best practices, coordinated technical teams, validated security configurations, and served as the focal point for strategic client requests. The program formalized endpoint security policy standards, documented investigative workflows, and integrated EDR operational procedures into the company incident management and hiring evaluation processes.
|
 |
DigiTouch | Professional Services | 365 | $47M | Italy | Microsoft | Microsoft Defender for Endpoint (MDE) | Endpoint Detection and Response (EDR) | 2020 | n/a |
In 2020, DigiTouch deployed Microsoft Defender for Endpoint (MDE) as its Endpoint Detection and Response (EDR) solution across its corporate offices. The deployment covered approximately 250 users in Milan, Rome, Lissone, and Catania, protecting endpoints running Windows 10, Windows 11, and Mac OS.
Microsoft Defender for Endpoint (MDE) was configured to provide endpoint detection and response, client antivirus management, and device control aligned with Endpoint Detection and Response (EDR) functional workflows. Configuration work included Group Policy integration for Windows configuration management, BitLocker alignment for disk encryption enforcement, and endpoint agent provisioning across the corporate PC and laptop fleet.
The MDE rollout integrated with existing identity and device management systems, notably Active Directory and the Microsoft 365 Admin Console, and used the Microsoft 365 Defender console for antivirus and threat management activities. Operational tooling and support workflows tied into JIRA Atlassian ticketing, with ServiceDesk ManageEngine used until March 2022, and device access and VPN provisioning continued to leverage SonicWall VPN Console and FortiClient VPN configurations. Virtual machine management via VMware Vcenter and printing workflows via SafeQ remained in the operational landscape.
Governance and operational ownership were retained by DigiTouch IT staff, who managed user accounts, permissions, distribution lists, shared mailboxes, SharePoint folders, and Teams groups alongside endpoint protection controls. Day to day first and second level support, ticket driven remediation, Group Policy based enforcement, and centralized admin controls in Microsoft 365 established the operational model for IT security and endpoint management under Microsoft Defender for Endpoint, aligning the Endpoint Detection and Response (EDR) capability with DigiTouch business functions in IT support and security.
|
|
|
Eternoo Italy | Distribution | 665 | $255M | Italy | Microsoft | Microsoft Defender for Endpoint (MDE) | Endpoint Detection and Response (EDR) | 2023 | n/a |
In 2023, Eternoo Italy deployed Microsoft Defender for Endpoint (MDE) as the companywide Endpoint Detection and Response (EDR) capability to strengthen endpoint visibility and incident detection across headquarters and branch offices. The deployment was carried out within the broader remit of the ICT Infrastructure Manager, who oversees networks, on-premises and cloud Microsoft Services, endpoint management, and helpdesk procedures, and the MDE rollout was positioned as a central element of endpoint security architecture.
Microsoft Defender for Endpoint (MDE) was configured to deliver standard EDR capabilities, including continuous endpoint telemetry collection, behavioral threat detection, and incident investigation workflows. Sensor deployment used the existing Remote Monitoring and Management platform to push agents to Windows PCs, while Mobile Device Management provided device enrollment for Apple and Android endpoints, aligning detection policies with device configuration and BitLocker encryption status reporting.
Integrations were implemented with core Microsoft services and operational controls already managed by Eternoo, including Windows Server Active Directory and AD synchronization to Office 365, Team and SharePoint identity sync, the companys MDM and RMM toolchains, and existing device encryption controls. The MDE implementation was designed to coexist with previously configured antivirus and web security controls such as SentinelOne and LibraEsva, enabling hybrid detection and layered protection without introducing new third party vendor dependencies.
Governance for Microsoft Defender for Endpoint focused on embedding alerts and triage into established helpdesk workflows, updating operating standards and incident handling procedures, and aligning EDR telemetry with backup, DLP and disaster recovery documentation maintained by the IT organization. Rollout planning reflected the companys operational model across HQ and branch sites, and the implementation narrative centers on centralizing endpoint detection and response within Eternoo Italys existing Microsoft-centric infrastructure.
|
 |
European University Institute | Education | 1100 | $105M | Italy | Microsoft | Microsoft Defender for Endpoint (MDE) | Endpoint Detection and Response (EDR) | 2018 | n/a |
In 2018, European University Institute integrated Microsoft Defender for Endpoint (MDE) as its Endpoint Detection and Response (EDR) platform to strengthen endpoint security across institutional devices. European University Institute Microsoft Defender for Endpoint Endpoint Detection and Response (EDR) supports the universitys operational objective of protecting desktops, laptops, tablets, and mobile devices across Windows, macOS, iOS, and Android environments.
The deployment focused on standard EDR capabilities including sensor-based threat detection, behavioral analytics, and automated remediation workflows, combined with device compliance baselines and patch orchestration. Microsoft Defender for Endpoint was configured alongside established device lifecycle processes, including zero-touch provisioning and certification workflows driven by Autopilot and Apple Business Manager, to maintain consistent security posture from device enrollment through decommissioning.
Operational integration tied Microsoft Defender for Endpoint to existing endpoint management and identity systems, specifically Microsoft Intune, Microsoft Configuration Manager SCCM, Entra ID identity management, Active Directory Group Policies, Exchange Online, and Teams. Automation and operational tooling used PowerShell and Microsoft Graph to orchestrate remediation, compliance reporting, software distribution, and device inventory, and the implementation was executed by the Workspaces End-User Computing Team covering Florence and broader international environments under global IT Asset Management for thousands of users.
Governance incorporated compliance baselines, conditional access controls, and MFA in Entra ID to align device telemetry from Microsoft Defender for Endpoint with institutional SLAs and security standards. The program also centralized Microsoft 365 licensing and procurement under EU public procurement rules, delivering documented cost savings and ensuring regulatory compliance while significantly reducing risk exposure as part of the universitys broader cybersecurity posture.
|
 |
|
Healthcare | 100 | $10M | Italy | Microsoft | Microsoft Defender for Endpoint (MDE) | Endpoint Detection and Response (EDR) | 2020 | n/a |
|
|
|
|
Consumer Packaged Goods | 1143 | $480M | Italy | Microsoft | Microsoft Defender for Endpoint (MDE) | Endpoint Detection and Response (EDR) | 2020 | n/a |
|
|
|
|
Transportation | 600 | $95M | Italy | Microsoft | Microsoft Defender for Endpoint (MDE) | Endpoint Detection and Response (EDR) | 2020 | n/a |
|
|
|
|
Professional Services | 350 | $50M | Italy | Microsoft | Microsoft Defender for Endpoint (MDE) | Endpoint Detection and Response (EDR) | 2019 | n/a |
|
|
|
|
Manufacturing | 1600 | $400M | Italy | Microsoft | Microsoft Defender for Endpoint (MDE) | Endpoint Detection and Response (EDR) | 2021 | n/a |
|
Showing 1 to 10 of 11 entries
Buyer Intent: Companies Evaluating Microsoft Defender for Endpoint (MDE)
ARTW Buyer Intent uncovers actionable customer signals, identifying software buyers actively evaluating Microsoft Defender for Endpoint (MDE). Gain ongoing access to real-time prospects and uncover hidden opportunities.
Discover Software Buyers actively Evaluating Enterprise Applications
| Logo | Company | Industry | Employees | Revenue | Country | Evaluated | ||
|---|---|---|---|---|---|---|---|---|
| No data found | ||||||||
FAQ - APPS RUN THE WORLD Microsoft Defender for Endpoint (MDE) Coverage
Microsoft Defender for Endpoint (MDE) is a Endpoint Detection and Response (EDR) solution from Microsoft.
Companies worldwide use Microsoft Defender for Endpoint (MDE), from small firms to large enterprises across 21+ industries.
Organizations such as Loacker, SIAE Microelettronica, Eternoo Italy, Sogin and European University Institute are recorded users of
Microsoft Defender for Endpoint (MDE) for Endpoint Detection and Response (EDR).
Companies using Microsoft Defender for Endpoint (MDE) are most concentrated in Consumer Packaged Goods, Manufacturing and Distribution, with adoption spanning over 21 industries.
Companies using Microsoft Defender for Endpoint (MDE) are most concentrated in Italy, with adoption tracked across 195 countries worldwide. This global distribution highlights the popularity of Microsoft Defender for Endpoint (MDE) across Americas, EMEA, and APAC.
Companies using Microsoft Defender for Endpoint (MDE) range from small businesses with 0-100 employees - 9.09%, to mid-sized firms with 101-1,000 employees - 63.64%, large organizations with 1,001-10,000 employees - 27.27%, and global enterprises with 10,000+ employees - 0%.
Customers of Microsoft Defender for Endpoint (MDE) include firms across all revenue levels — from $0-100M, to $101M-$1B, $1B-$10B, and $10B+ global corporations.
Contact APPS RUN THE WORLD to access the full verified Microsoft Defender for Endpoint (MDE) customer database with detailed Firmographics such as industry, geography, revenue, and employee breakdowns as well as key decision makers in charge of Endpoint Detection and Response (EDR).