.webp)
BlueVoyant has launched a Microsoft Defender XDR ISOC Deployment Service to help enterprises adopt Microsoft's Integrated Security Operations Centre in Defender.
The move makes BlueVoyant one of the early Microsoft partners offering deployment support for the new security operations model.
The service is aimed at organisations using Microsoft 365 E5, E7 and the Microsoft Defender Suite. It is designed to support customers as Microsoft brings security information and event management together with extended detection and response in the Defender portal.
Microsoft's ISOC model combines SIEM and XDR in one interface, giving security teams and AI agents access to shared signals, context and controls within Microsoft Defender.
Customers can begin with a no-cost ISOC Readiness Assessment from BlueVoyant. The assessment reviews an organisation's environment before a more defined deployment programme begins.
That preparatory work can lead to scoped deployment support across several Microsoft security products, including Defender deployment and configuration across Endpoint, Identity, Office 365, Cloud Apps and Entra ID Identity Protection.
The service also includes walkthroughs of ISOC custom detections, workbooks, automation, and user and entity behaviour analytics. It covers use-case engineering to develop and refine detection rules, workbooks and automations.
Partner role
BlueVoyant is positioning the new offering around its existing work with Microsoft security tools. Its experience across Microsoft Sentinel, Microsoft Defender, Microsoft Entra and Microsoft Purview is intended to support customers through different stages of Microsoft's rollout.
John Hernandez, Chief Executive Officer at BlueVoyant, said the service is intended to bridge the gap between initial deployment and operational use.
"We're proud to be one of the first Microsoft partners to help customers deploy Microsoft's new integrated security operations centre," said John Hernandez, Chief Executive Officer at BlueVoyant.
"ISOC gives customers an opportunity to improve how they run security operations and prepare for teams and AI agents to work from shared data and context. Customers need a practical path from deployment to day-to-day operations, which is exactly where BlueVoyant's expertise comes in - we don't just help stand it up, we help run it," Hernandez added.
Micah Heaton, Executive Director of Microsoft Product and Innovation Strategy at BlueVoyant, said the company often sees customers owning security tools that are not fully used in practice.
"The pattern we see most often is a gap between the security technology customers own and what they can actually put to work," said Micah Heaton, Executive Director of Microsoft Product and Innovation Strategy at BlueVoyant.
"ISOC helps close that gap by bringing security data, context and response workflows together in Microsoft Defender. The economics matter too. Cost pressure should not decide which evidence an analyst gets to see. Our role is to help customers assess readiness, activate the capabilities that matter and put them to work through deployment and managed services. That gives customers a practical foundation for adopting agents with the right context and controls," Heaton said.
Microsoft context
For Microsoft, these new partner services are part of a broader push to move customers towards a more integrated security operations environment. The company is presenting ISOC as a way to align human analysts and AI-driven tools around the same underlying data and controls.
Naseem Tuffaha, Corporate Vice President of Customer Value Creation at Microsoft, said external partners will play a central role in making the model work within customer environments.
"ISOC in Microsoft Defender represents an important evolution in how organisations defend against modern threats," said Naseem Tuffaha, Corporate Vice President of Customer Value Creation at Microsoft.
"Our security partners like BlueVoyant play a critical role in helping customers bring these capabilities together, operationalise them in their environments, and turn Microsoft's security innovation into meaningful outcomes. ISOC is built for agentic security, and the combination of technology and operational experience will be essential to helping customers realise its full value," Tuffaha said.
The launch also reflects a broader market push to simplify security operations stacks that have often expanded across multiple products and consoles. By tying deployment services to Defender's ISOC approach, BlueVoyant is seeking to capture demand from customers looking to consolidate tools and workflows within Microsoft's ecosystem.
The service is available now, with implementation tied to customer eligibility, agreed scope and Microsoft's phased rollout.