Is Microsoft Threat Protection down or not working?

What happened to Microsoft Defender XDR, why did the service go down and not work? Here you can see who else is having the same problem with Microsoft Defender XDR, as well as possible solutions. According to our statistics, the following most often do not work: Account, Login, Mobile App, Website.

Current status: No failures

At the moment, according to our data, Microsoft Defender XDR is working fine, but single failures are possible. If Microsoft Defender XDR does not work for you, then report your problem and write a comment.
Add comment

Microsoft Defender XDR outage reports in the last 24 hours

User reports by hour (UTC), last 24 hours

Hour
Weight 0 0 0 0 0 0
Hour
Weight 0 0 0 0 0 0
Hour
Weight 0 0 0 0 0 0
Hour
Weight 0 0 0 0 0 0

Total weight in 24 hours: 0 Busiest hour: 22:00 UTC (weight 0)

How this score compares

Current 24-hour weight is 0. Warnings start at 20, Failed at 50. Median services on this language today is 0.

Other services in this category

Facts

Official website microsoft.com

About Microsoft Defender XDR

Microsoft Defender XDR (also known as Microsoft Threat Protection or Microsoft 365 Defender) is a security product and service offered by Microsoft. Details are available on its official website.
Microsoft Defender XDR brings security signals from email, endpoints, identities, and cloud apps into one place. When the service has trouble, the most common symptoms are delayed alerts, slow incident views, or sign-in issues with the Microsoft 365 account used to reach the portal.
Microsoft Defender XDR is Microsoft's extended detection and response platform. It collects alerts and telemetry from products like Defender for Endpoint, Defender for Office 365, and Defender for Identity, then correlates them into incidents for your security team to triage. Most problems are modest rather than total failures. Alert delivery can lag, dashboards may load slowly during busy periods, and advanced hunting queries sometimes time out. Third-party integrations and API scripts can break when the underlying service changes or when tokens expire. Before reporting an issue, confirm your Microsoft 365 account has the right security roles and that your connection to the portal is stable. Check whether other Microsoft 365 services work with the same login. If only one feature seems affected, note which one. Clearing browser cache or trying a private window resolves portal display issues more often than you might expect.

Questions

Is Microsoft Defender XDR down right now?

According to reports on this page, Microsoft Defender XDR looks fine for most people. Isolated failures still happen — report yours if you are stuck.

When was the last mass outage?

We do not have a recorded mass outage for Microsoft Defender XDR yet.

Why are my security alerts arriving late or out of order?

Some delay between an event and its alert is normal as signals are collected and correlated. Extended delays across many alerts usually point to a service-side disruption or an issue with your data connectors. Check that your integration settings are unchanged and monitor status updates until alert flow returns to normal.

The portal will not load for some analysts on my team. What should we check?

First confirm each account has the appropriate security roles assigned in Microsoft 365, since limited roles can hide the portal. If roles are correct, have one affected user try a different browser or a private window. If the portal loads for some users but not others, the issue is likely local to those users rather than a platform outage.

Microsoft Defender XDR - error and failure reports, troubleshooting methods

Is Microsoft Threat Protection down or not working?
Leave your comment describing the failure and share with other users how to solve the problem.
  • No registration required.
  • Messages with obscene language and insults, as well as breaking the law, are not allowed to be published.
  • Active links in the text of the message are not published, but displayed in plain text.
  • It is forbidden to post your own and other people's personal data: addresses, phone numbers, emails, accounts in instant messengers, etc.