Microsoft

01. Company

Microsoft is a technology company headquartered in Redmond, Washington, with over 223,000 employees [S1]. The company operates globally, spanning 190 countries [S2].

02. Product

Microsoft offers a range of products, including Microsoft 365, Azure, and Dynamics 365 [S9] [S10] [S11]. The company competes with other technology firms, such as Google, Amazon, and Oracle [S9] [S10] [S11].

03.Security & Risk

Microsoft has a comprehensive security program, including incident management and compliance [S25] [S27]. However, the company has experienced security incidents, such as data breaches and vulnerabilities [S15] [S22] [S24].

Deterministic outside-in checks run directly against the vendor's domain - not inferred from press or marketing pages.

Last observed: Aug 12, 2026, 05:29 PM

• TLS certificate

  Certificate expires in 129 days

  infoPass

• Security headers

  0/6 security headers present

  highFail

• Email authentication (SPF / DMARC)

  infoPass

• DNS presence

05. AI Risk

How this vendor uses AI/ML with customer data - model providers, training stance, subprocessors, and relevant DPA language when publicly documented.

AI exposure tier: Moderate AI Exposure

Microsoft uses AI in its products and services, but the company's AI posture is not fully transparent [S19].

Model providers

Microsoft

Training on customer data

Training stance unknown

06. Events

• [legal] Federal Litigation Against Unknown Defendants

  Microsoft filed a federal lawsuit against John Does 1-2 in the US District Court for the Western District of Washington.

  Aug 5, 2026, 12:00 AM · Source

• [breach] Storm-2949 Cloud-Wide Breach

  Threat actor Storm-2949 exploited Self-Service Password Reset social engineering to compromise identities, gaining access to Azure Storage accounts and SQL servers for potential data exfiltration.

  May 18, 2026, 12:00 AM · Source

• [legal] Securities Class Action Filed

  A securities class action was filed against Microsoft regarding capital expenditure disclosures between May 2025 and January 2026.

  May 1, 2025, 12:00 AM · Source

• [outage] DDoS Attack Causes Azure and Microsoft 365 Outages

  Following the CrowdStrike outage, a DDoS attack caused nearly 10 hours of service disruption for Azure and Microsoft 365 due to an error in defense implementation.

  Jul 18, 2024, 12:00 AM

07. Competitors

Vendors offering a similar product or service - for side-by-side comparison, not a ranking.

• Google

  google.com

  Competes in productivity suites and cloud infrastructure.

  Vet this vendor →

• Oracle

  oracle.com

  Competes in enterprise software and cloud databases.

  Vet this vendor →

• IBM

  ibm.com

  Competes in cloud services and enterprise consulting.

  Vet this vendor →

• Salesforce

  salesforce.com

  Competes in CRM and low-code development platforms.

  Vet this vendor →

• Google Workspace

  google.com

  A competing suite of productivity applications [S9].

  Vet this vendor →

08. Recent News

Recent news includes Microsoft's expansion of AI model choice for startups and the company's efforts to secure AI agents and DevSecOps [S19].

09. Citations

1. [1] Microsoft has over 223,000 employees. Microsoft Corp Company Profile - Overview - GlobalData

13. Vendor response

Content in this section is vendor-supplied and does not alter Vendorisk.ai's risk tier or evaluation.