Defender Analytics

Microsoft Defender Analytics by Brickclay gives your security team instant, deep visibility into your entire Microsoft Defender for Endpoint environment — through seven purpose-built Power BI dashboards that deploy in under 15 minutes and cost nothing for up to 100 devices. No ETL pipeline. No data warehouse. No engineering project. Connect directly to your Microsoft Defender for Endpoint tenant via read-only API permissions and every dashboard populates immediately from your live environment. Your data never leaves your Azure tenant — Brickclay is never in your data path. **7 Pre-Built Security Dashboards — Free for Up to 100 Devices** * **Protection Insights** — Your security command centre. Live incident data, Vulnerability Risk Matrix, device exposure score, and Secure Score gaps in one auto-updating board. Built for daily SOC briefings and leadership reviews. * **Incidents & Alerts** — Real-time incident and alert tracking by severity, status, and MITRE ATT&CK tactic. Drill into affected assets and track attack origins. Trend analysis for long-term resilience planning. * **Device Health** — Complete endpoint visibility: active, inactive, unmanaged, and shadow IT devices — mapped with exposure levels, OS compliance, and risk rankings ranked by threat intelligence. * **Software & Compliance** — Full software inventory with unpatched and End-of-Support applications flagged automatically. Public exploit tracking so you know which gaps attackers are actively targeting. * **Vulnerability Risk** — Exploitable vs. non-exploitable CVE classification with device-level impact mapping and time-to-remediation tracking. Fix what matters, backed by threat intelligence — not just CVSS scores. * **Patch Gaps** — Always-current missing security updates ranked by severity and exploitability. Vendor-backed remediation recommendations with device-level drill-through. Close gaps before attackers find them. * **Secure Score Control** — Prioritised control actions ranked by score impact, with implementation cost (Low/Moderate/High) and user impact per action. Purpose-built for CISO briefings and board security reporting. **Zero-Storage Architecture — Your Data Stays in Your Tenant** All 11 Microsoft Defender for Endpoint API permissions are read-only. Data flows directly from Microsoft's APIs into your Power BI workspace. Brickclay never receives, stores, or processes your security data. Fully compliant with Microsoft's template app certification requirements. **Pricing — Two Tiers, No Surprises** * **Community (Free)**: All 7 dashboards, up to 100 devices, unlimited internal users, standard 2-day email support. No credit card. No time limit. Install from Microsoft AppSource in one click. * **Enterprise ($2,999/year)**: Everything in Community plus unlimited devices (no cap), a dedicated account manager, priority 1-business-day SLA, scheduled report delivery, white-label and branded exports, Executive Summary Pack, single-tenant dedicated deployment, and custom data integrations. One flat annual price — no per-device fees. Contact subscriptions@brickclay.com to upgrade.