Inforcer launches TDR threat detection platform for MSPs

Inforcer has announced the general availability of inforcer TDR, a threat detection and response platform built specifically for managed service providers managing Microsoft 365 multi-tenant environments.

The product detects across Entra ID, Exchange, SharePoint, Teams, Defender and Purview, giving MSPs visibility into attacks beyond identity alone, the company said.

It can also analyse up to six months of historical Microsoft 365 logs to surface compromises that may have gone unnoticed.

Inforcer stated 500,000 users were onboarded in the first four weeks following an early access launch in June 2026, and the platform has since processed 20 billion logs - equivalent, the company said, to 3,000 years' worth of data.

For partners, TDR consolidates incident data into a single dashboard covering all customer tenants, with exportable customer-ready reports showing every threat detected, every action taken, and the timeline of events.

The company said the platform has detected thousands of real threats within minutes during its first six weeks of availability and reduced average containment time to less than 60 seconds.

The platform uses a behavioural engine to profile individual users, Entra applications, tenants and MSPs, identifying anomalies and automatically containing breaches by revoking active sessions or disabling compromised accounts - in as little as a few seconds, according to inforcer.

A human security operations centre (SOC) team provides oversight, additional threat verification and false-positive reduction alongside the automated response.

“We opened TDR to more than 700 MSPs, where it was tested against real tenants and real attacks before it was fully ready to be released," said Matthé Smit, chief product officer at inforcer.

"Following this, users provided consistent feedback in three areas: TDR is surfacing threats in customer estates that partners did not know were there, which is sobering to hear and exactly why we built it.

"Second, it is quiet, so it earns a technician's attention instead of draining it. And third, the reporting matters as much as the detection, because it enables our partners to show their customers what happened, in what order, and what was done about it."