Orange Cyberdefense scales detection and response on top of Microsoft Sentinel

Orange Cyberdefense, the specialist cybersecurity arm of the Orange Group, has announced an evolution in its long-standing collaboration with Microsoft, offering organizations Managed detection and response capabilities with Microsoft Sentinel.

As organizations navigate a rapidly shifting threat landscape, the need for platform-centric security has become a priority. This collaboration integrates Microsoft’s cloud-native SIEM (Security Information and Event Management) into Orange Cyberdefense’s established managed services, providing a streamlined path for businesses to modernize their security operations across hybrid and multi-cloud environments.

Modernizing security operations

The integration of Microsoft Sentinel into the Orange Cyberdefense service suite addresses the core challenges of modern Security Operations Centers (SOCs): scalability and complexity. Microsoft Sentinel is an AI first, cloud native platform that delivers an industry-leading security information and event management (SIEM) solution including a  unified low cost data lake to store all your security data, a graph to understand relationships and find threats faster, and a collection of intelligent reasoning tools. By leveraging Sentinel’s native integration with Microsoft’s broader security stack, Orange Cyberdefense provides:

• Enhanced Visibility: A unified view of security data across cloud, on-premise, and hybrid infrastructures.
• Intelligence-Led Detection: Native SIEM capabilities are bolstered by Orange Cyberdefense’s proprietary detection logic, use-case analytics, and machine learning models.
• Accelerated Response: Automated investigation workflows allow security teams to mitigate threats faster, reducing the "burden" of manual intervention.
• Operational Optimization: Optional premium reporting and threat hunting, combined with data volume optimization to ensure cost-effective security management.

A shared vision for cloud-native resilience

The collaboration between Orange Cyberdefense and Microsoft extends beyond technology integration; it represents a strategic alignment of technical roadmaps and go-to-market execution. By centering these managed services on Microsoft Sentinel, Orange CyberDefense is providing a foundation of cloud-native analytics and automation that eliminates the overhead of traditional, hardware-heavy SIEM models. This helps ensure that global enterprises can transition from reactive security to a model aligned with real-world operational needs.

“Organizations are undergoing profound transformation in an increasingly volatile cybersecurity landscape,” said Kaja Narum, EVP Business Unit – Cyber with Business - at Orange Cyberdefense. “By integrating Microsoft Sentinel into our managed MDR services, we are strengthening our ability to support customers in modernizing their security operations while maintaining a high level of operational control and expertise.”

This approach allows customers to centralize threat management and gain the real-time visibility required to stay ahead of sophisticated actors. By unifying security data across diverse environments, the service empowers internal teams to shift their focus from managing infrastructure to proactive defense.

“As cyber threats grow in scale and complexity, organizations need security platforms that deliver real‑time visibility, intelligence, and resilience,” said Steve Dispensa, CVP Security, Microsoft. “Microsoft Sentinel doesn’t just detect attacks—it empowers defenders with the intelligence, speed, and visibility to stay ahead of them. By working with trusted partners like Orange Cyberdefense, we help customers  strengthen their security operations while focusing their teams on what matters most — running the business, with peace of mind.”