Identity-First MDR and Agentic Investigation for Microsoft 365

Attic Security is a Dutch cybersecurity vendor that secures Microsoft 365 environments for small and mid-sized businesses, semi-public organizations, and the managed service providers that support them. Founded in 2021 and based in Zevenbergen, Netherlands, by cybersecurity veterans Erik Remmelzwaal, Wesley Neelen, and Rik van Duijn, the company was built on the premise that enterprise-grade detection and response should not require an enterprise budget or a dedicated in-house security team.

The product line layers upward from a free browser-based tool that flags fake Microsoft login pages, including adversary-in-the-middle attacks, before credentials are entered. Bouncer adds identity threat detection across login attempts and user awareness training, while Fixer continuously audits Microsoft 365 configuration against CIS benchmark controls and applies one-click remediations after approval. The full MDR tier runs on Microsoft Sentinel, correlating cloud, endpoint, email, Teams, and administrative activity with long-term log retention for forensic work.

IVON, the agentic layer announced for both direct customers and MSP partners, ingests alerts from Defender, Sentinel, and Entra ID, triages them, runs cross-product queries enriched with identity context, and returns a verdict with supporting evidence and a confidence score. Proposed remediations such as session revocation, password resets, or inbox rule deletion wait on human approval, with each step logged for audit. Consumption is billed per resolved incident, and European data residency anchors the positioning against US-headquartered rivals.