List of Microsoft Defender for Identity Customers
Redmond, 98052-6399, WA,
United States
Since 2010, our global team of researchers has been studying Microsoft Defender for Identity customers around the world, aggregating massive amounts of data points that form the basis of our forecast assumptions and perhaps the rise and fall of certain vendors and their products on a quarterly basis.
Each quarter our research team identifies companies that have purchased Microsoft Defender for Identity for Endpoint Detection and Response (EDR) from public (Press Releases, Customer References, Testimonials, Case Studies and Success Stories) and proprietary sources, including the customer size, industry, location, implementation status, partner involvement, LOB Key Stakeholders and related IT decision-makers contact details.
Companies using Microsoft Defender for Identity for Endpoint Detection and Response (EDR) include: MVP Health Care, a United States based Insurance organisation with 1700 employees and revenues of $3.20 billion, Ansys, a United States based Professional Services organisation with 6500 employees and revenues of $2.55 billion, John Sisk & Son, a Ireland based Construction and Real Estate organisation with 2500 employees and revenues of $614.0 million, PGG Wrightson, a New Zealand based Professional Services organisation with 1800 employees and revenues of $578.0 million and many others.
Contact us if you need a completed and verified list of companies using Microsoft Defender for Identity, including the breakdown by industry (21 Verticals), Geography (Region, Country, State, City), Company Size (Revenue, Employees, Asset) and related IT Decision Makers, Key Stakeholders, business and technology executives responsible for the software purchases.
The Microsoft Defender for Identity customer wins are being incorporated in our Enterprise Applications Buyer Insight and Technographics Customer Database which has over 100 data fields that detail company usage of software systems and their digital transformation initiatives. Apps Run The World wants to become your No. 1 technographic data source!
Apply Filters For Customers
| Logo | Customer | Industry | Empl. | Revenue | Country | Vendor | Application | Category | When | SI | Insight | Insight Source |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
 |
Ansys | Professional Services | 6500 | $2.5B | United States | Microsoft | Microsoft Defender for Identity | Endpoint Detection and Response (EDR) | 2022 | Red Canary | In 2022, Ansys engaged Red Canary to operationalize telemetry from the Microsoft Defender suite, including Microsoft Defender for Identity, as part of an Endpoint Detection and Response (EDR) initiative managed with Microsoft as the vendor. The engagement focused on embedding Microsoft Defender for Identity into 24x7 managed detection and response coverage for US-based security operations, aligning the application with SOC workflows and continuous monitoring requirements. Red Canary configured and tuned Microsoft Defender for Identity alongside Microsoft Defender for Endpoint and Microsoft Defender for Cloud Apps, centralizing telemetry ingestion, alert prioritization, and investigation orchestration. Functional capabilities implemented included detection tuning, automated alert triage, investigation playbook execution, and persistent telemetry enrichment to reduce noise and streamline analyst workflows. Integrations were explicit, with Defender for Identity, Defender for Endpoint, and Defender for Cloud Apps fed into Red Canary’s MDR platform to provide consolidated alerting and case management. Operational scope was scoped to Ansys security operations in the United States, with 24x7 monitoring and incident response coverage provided as part of the service, and SOC analysts using unified telemetry to accelerate time to detection and containment. Governance changes centered on shifting alert triage and initial investigations into the Red Canary MDR operational model, reducing internal SOC alert load and formalizing escalation paths for incidents detected via Microsoft Defender for Identity. Outcomes reported by Red Canary included far fewer actionable alerts and improved SOC productivity, reflecting reduced alert fatigue and faster investigator throughput as measured by the MDR engagement. | |
 |
John Sisk & Son | Construction and Real Estate | 2500 | $614M | Ireland | Microsoft | Microsoft Defender for Identity | Endpoint Detection and Response (EDR) | 2020 | Threatscape | In 2020 John Sisk & Son deployed Microsoft Defender for Identity as part of a Microsoft 365 E5 security rollout across its Ireland and UK operations, aligning identity protection with Endpoint Detection and Response (EDR) capabilities. The deployment also included Microsoft Defender ATP to provide endpoint telemetry and centralized alerting within the broader Microsoft security stack. The implementation used Azure Advanced Threat Protection, now Microsoft Defender for Identity, to surface identity analytics and suspicious activity detection across on prem and cloud accounts. Functional capabilities implemented included behavior based detection of anomalous sign ins and lateral movement indicators, telemetry ingestion from Active Directory signals, and alert generation routed into security operations workflows. Integrations were explicitly configured with Azure AD conditional access and multifactor authentication to enforce adaptive access policies and harden credential based attack paths. The Microsoft Defender for Identity deployment was coordinated with Microsoft Defender ATP and the Microsoft 365 E5 licensing structure to unify identity and endpoint signals for incident investigation and response. Rollout and governance were delivered with partner Threatscape, which conducted configuration, policy rollout, and integration activities across the group. The stated objectives were to strengthen identity protection and reduce time to detect and respond to incidents, with operational scope focused on security operations and IT teams across John Sisk & Son in Ireland and the UK. | |
 |
MVP Health Care | Insurance | 1700 | $3.2B | United States | Microsoft | Microsoft Defender for Identity | Endpoint Detection and Response (EDR) | 2022 | Sparkhound | In 2022, MVP Health Care enabled Microsoft Defender for Identity as part of a Microsoft 365 E5 and Azure Sentinel deployment across its United States operations. Microsoft Defender for Identity was provisioned as an Endpoint Detection and Response (EDR) capability to centralize identity and threat telemetry within the organization security operations environment. The implementation configured Microsoft Defender for Identity to ingest identity telemetry from directory services and Microsoft 365 signals, enabling behavioral analytics, compromised credential detection, and suspicious lateral movement indicators consistent with EDR functionality. Detection rules were tuned and alerting was mapped into standardized SOC workflows to improve fidelity of identity-related alerts. Integration architecture routed Microsoft Defender for Identity alerts into Azure Sentinel, creating a centralized SIEM driven detection layer and feeding correlated incidents into incident response processes. The Microsoft 365 E5 license bundle was used to provision Defender for Identity alongside other native Microsoft security telemetry sources to reduce reliance on multiple third-party tools. Sparkhound led the engagement and managed the deployment, and the case study reports reduced tool sprawl and improved security visibility with Microsoft Defender for Identity listed explicitly as part of the E5 deployment. Governance activity focused on consolidating alerting, formalizing triage and escalation flows, and centralizing monitoring across MVP Health Care United States operations. | |
 |
|
Professional Services | 1800 | $578M | New Zealand | Microsoft | Microsoft Defender for Identity | Endpoint Detection and Response (EDR) | 2020 | n/a |
|
|
Buyer Intent: Companies Evaluating Microsoft Defender for Identity
Discover Software Buyers actively Evaluating Enterprise Applications
| Logo | Company | Industry | Employees | Revenue | Country | Evaluated | ||
|---|---|---|---|---|---|---|---|---|
| No data found | ||||||||