Microsoft Defender for Endpoint

This integration enables TrendAI Vision One™ to ingest comprehensive telemetry from Microsoft Defender for Endpoint (MDE), providing organisations with complete cyber risk visibility across their Microsoft-managed infrastructure for Cyber Risk Exposure Management (CREM). The integration pulls in discovered endpoints, monitors security configuration status and antivirus health, and correlates vulnerabilities to specific assets. By connecting Microsoft Defender data, organisations gain holistic attack-surface discovery, prioritised risk events, and consolidated threat visibility without requiring TrendAI agents on their endpoints. MDE threat detections are also surfaced in TrendAI Vision One™ for comprehensive visibility into attack pressure. This extends CREM's capabilities to environments standardised on Microsoft E5 security solutions, enabling comprehensive risk assessment across mixed or purely Microsoft-managed estates and helping security teams understand their true cyber risk posture regardless of their endpoint protection platform, through a single platform experience.