Microsoft Defender for Identity
Protect your on-premises identities with cloud-powered intelligence.
Identity protection and security
Use Defender for Identity to help security operations teams manage identity risk and correlate signals with Microsoft 365.
?resMode=sharp2&op_usm=1.5,0.65,15,0&wid=40&hei=40&qlt=75&fit=constrain){kind=icon}
Reduce attack surface
Understand your risk posture to proactively minimize exposure to attacks.
?resMode=sharp2&op_usm=1.5,0.65,15,0&wid=40&hei=40&qlt=75&fit=constrain){kind=icon}
Detect in real time
Be alerted to suspicious activities, compromised identities, and lateral movement throughout your organization.
?resMode=sharp2&op_usm=1.5,0.65,15,0&wid=40&hei=40&qlt=75&fit=constrain){kind=icon}
Investigate threats
Correlate identity alerts with incidents in Microsoft 365 Defender, giving security teams important context when investigating threats.
?resMode=sharp2&op_usm=1.5,0.65,15,0&wid=40&hei=40&qlt=75&fit=constrain){kind=icon}
Respond to threats comprehensively
Take immediate action on a compromised identity or use custom detection rules to automate a response that suits your organization’s needs.
Watch the video
See how Defender for Identity helps protect organizations against identity-based threats across the entire attack lifecycle.
Capabilities
Get cloud-powered insights and intelligence in each stage of the attack lifecycle with Defender for Identity and help secure your identity infrastructure.
Bolster your defenses with identity posture assessments
Help security operations teams identify configuration vulnerabilities and get recommendations for resolving them. Identity security posture assessments are displayed in Microsoft Secure Score for increased visibility.
Get industry-leading detections spanning the attack lifecycle
Identify threats quickly and accurately with real-time analytics and data intelligence. Use sources such as event tracing for Windows, configuration data from Microsoft Entra ID, audit events, and network traffic—all mapped to MITRE ATT&CK techniques.
Highlight the identities most at risk
Prioritize the riskiest users in your organization. Combine insights from on-premises and cloud identities to get a user investigation priority score based on observed behavior and number of prior incidents.
Immediately respond to compromised identities
Immediately restrict identities confirmed as compromised so they can’t persist in your organization or be further exploited.
Integrated threat protection with SIEM and XDR
Empower your defenders to effectively secure your digital estate by combining extended detection and response (XDR) and security information and event management (SIEM).
Microsoft 365 Defender
Get unified security and visibility across endpoints, identities, emails, and cloud apps with an industry-leading XDR solution.
Microsoft Sentinel
Aggregate security data and correlate alerts from virtually any source with cloud-native SIEM from Microsoft.
Microsoft Defender for Cloud
Help protect your multicloud and hybrid cloud workloads with built-in XDR capabilities.
Streamline identity protection
Redraw your security perimeter with identity threat detection and response (ITDR) strategies.
See what our customers are saying
Related products
Use best-in-class Microsoft security products to prevent and detect attacks across your Microsoft 365 workloads.
Microsoft 365 Defender
Get integrated threat protection across devices, identities, apps, email, data, and cloud workloads.
Microsoft Entra ID
Stay informed about suspicious user and sign-in behavior in your Microsoft Entra ID (formerly Azure AD) environment.
Microsoft Defender for Endpoint
Explore endpoint security for businesses with more than 300 users.
Microsoft Defender for Office 365
Help secure your email, documents, and collaboration tools with Microsoft Defender for Office 365.
Additional resources
Explore documentation
Get started with Defender for Identity guides, tutorials, and videos.
Be part of the tech community
Get involved with the Defender for Identity community.
Watch episode one of The Defender’s Watch
Learn how to strengthen your security with evidence-based insights from experts defending against modern threats.
Protect everything
Make your future more secure. Explore your security options today.
Follow Microsoft