What Microsoft Israel R&D does

Microsoft Israel R&D Center (ILDC / מיקרוסופט ישראל מחקר ופיתוח) is a wholly-owned subsidiary of Microsoft Corporation, established as one of Microsoft's most strategic global development centers and operating 40+ product development teams across cybersecurity, AI, cloud platform, and productivity domains. The center originates and develops flagship Microsoft products including Microsoft Sentinel (cloud-native SIEM/SOAR), Microsoft Defender for Cloud (CSPM/CWP), Identity Threat Detection and Response (ITDR), Microsoft Defender XDR, Microsoft Security Copilot, Microsoft MSTIC threat intelligence, Kusto/Azure Data Explorer, Azure AI Video Indexer, Edge AI RAG, Edge Security Engineering, Copilot Studio, and AI-powered features in Microsoft Excel (Formula Completion). Core technology spans large-scale telemetry analytics, generative AI for formula creation, multi-model agentic systems for vulnerability discovery, and autonomous attack disruption. The center operates from Herzliya (headquarters) with additional engineering offices in Haifa, Tel-Aviv, Nazareth, Be'er-Sheva, and Jerusalem, employing 1,001–5,000 staff with leadership drawn from IDF intelligence units (Unit 8200, MAMRAM) and Israeli academic institutions.

The center's business model is internal R&D contribution to Microsoft's global product portfolio; it does not sell directly or maintain independent pricing. Revenue accrues at the parent level through Microsoft's commercial cloud, Microsoft 365, and Security product subscriptions distributed via Azure Marketplace, Microsoft AppSource, and the global enterprise field sales organization. Customer segments served (at the product level) include global enterprise and government organizations, the cybersecurity industry, and productivity/business applications users, with products impacting billions of users globally. In May 2025, the center underwent significant governance disruption when Microsoft fired General Manager Alon Haimovich following an internal ethics investigation finding that Azure cloud services had been misused by the Israeli Ministry of Defense; Microsoft France was placed in temporary oversight of Israel operations, creating an active reputational and regulatory risk that continues to shape the subsidiary's operating posture.

Name

Microsoft Israel R&D

Legal name

Microsoft Israel R&D Center

Website

https://microsoftrnd.co.il

Company type

Private

Founded year

2014

Operating status

Operating

Headcount range

1,001–5,000 employees

Short description

Microsoft Israel R&D Center is a wholly-owned subsidiary of Microsoft Corporation operating 40+ product teams that originate flagship cybersecurity (Sentinel, Defender for Cloud, ITDR), AI (Formula Completion, Copilot Studio), and cloud platform (Kusto, Azure AI Video Indexer) products, serving Microsoft's global enterprise, government, and productivity customer base.

Ownership category

akta.pro rank

Product category

Enterprise Cybersecurity Software

NAICS

Software Publishers (513210), Custom Computer Programming Services (541511)

SIC

Services-Computer Programming, Data Processing, Etc. (7370), Services-Computer Programming Services (7371)

akta.pro primary industry

Identity Threat Detection & Response (ITDR) (HDAEAJAH)

akta.pro secondary industries

AI Application Enablement Platforms (Copilot/Agent Frameworks, SDKs) (HDAEANAJ), IT Governance, Risk & Compliance (IT GRC) Platforms (HDAEALAK), AI Governance, Risk & Compliance (GRC) Platforms (HDAAAMAA)

Keywords

• Enterprise cybersecurity software
• Cloud security platform
• AI productivity tools
• Threat intelligence services
• Developer R&D center

Headquarters

HQ city

Herzliya

HQ country

Israel

HQ region

Middle East

Offices6 records

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Operations, Infrastructure, Marketing or Sales

Revenue model

1. R&D Contribution to Microsoft Products: As Microsoft's strategic R&D center in Israel, the center contributes to Microsoft's global product portfolio generating revenue through Microsoft's commercial cloud business including Azure, Microsoft 365, Security products, and other enterprise software subscriptions.

Go-to-market motion3 records

Distribution channels4 records

Marketing channels10 records

Core offering

Microsoft Israel R&D Center (ILDC) is a wholly-owned subsidiary of Microsoft Corporation operating 40+ product development teams focused on cybersecurity, cloud AI, and productivity innovations. The center develops flagship products for Microsoft's global portfolio including Microsoft Sentinel (cloud-native SIEM/SOAR), Microsoft Defender for Cloud (CSPM/CWP), Microsoft Defender XDR, Identity Threat Detection and Response (ITDR), Excel AI features (Formula Completion), Azure AI Video Indexer, Microsoft Copilot Studio, and the Microsoft Threat Intelligence Center (MSTIC).

Product overview

Microsoft Israel R&D Center (ILDC) is one of Microsoft's most strategic global development centers, operating 40+ product teams focused on cybersecurity, cloud AI, and productivity innovations. The center develops products within Microsoft's core security portfolio including Microsoft Sentinel (cloud-native SIEM/SOAR), Microsoft Defender for Cloud (CSPM/CWP), Identity Threat Detection and Response (ITDR), and Microsoft Defender XDR (extended detection and response). The Israel team also contributes to Microsoft Security Copilot (AI-powered security assistant) and Azure services including Azure AI Video Indexer, Edge AI RAG, and Edge Security Engineering. The center is known for developing Formula Completion AI for Excel, part of Excel Copilot's Formula Intelligence features. Additional products include Microsoft Copilot Studio for building AI agents and The Garage innovation hub. BlueHat IL hosts the largest security research community in Israel. The center operates Microsoft MSTIC (Microsoft Threat Intelligence Center) for nation-state threat tracking and operates within Microsoft's broader security, productivity, and cloud AI ecosystem.

Differentiator

Problem solved

Functional benefit

Brands

• BlueHat IL: The largest security research community conference in Israel, organized by Microsoft Israel R&D Center, bringing together industry leaders, entrepreneurs, academia, government officials, independent researchers, and hobbyists.
• The Garage
• Microsoft for Startups (Israel)

Products and services

• Microsoft Sentinel
• Microsoft Defender for Cloud
• Identity Threat Detection and Response (ITDR)
• Microsoft Defender XDR
• Microsoft Security Copilot
• Azure AI Video Indexer
• Microsoft Copilot Studio
• Microsoft Excel (with AI features)
• Microsoft MSTIC (Microsoft Threat Intelligence Center)
• Microsoft Security for AI
• Edge Security Engineering
• Edge AI RAG

Quantifiable outcome

• Products impact billions of people globally
• +2 more outcomes

Named customers3 records

Segments3 records

Ideal customer profiles1 record

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

AI capability8 records

Feature8 records

Partnerships

Five partnerships are on record, tiered core and minor.

• Microsoft for StartupscoreGTM or Marketing PartnerMicrosoft Israel R&D Center partners with Microsoft for Startups program to support startups and cloud innovation partners, providing access to Microsoft technology and resources.
• QueenBminorStrategic or Co-development PartnerSTEM education initiative enabling young girls to be aware of their tech capabilities and explore various fields of interest
• MagshimimminorStrategic or Co-development PartnerSTEM education program for periphery population to explore, learn and become experts in the tech industry
• Woman2WomanminorStrategic or Co-development PartnerMentorship and recruitment program for women in tech, providing fair opportunity for Arab women and other underrepresented groups in the Israeli tech industry
• Israeli Academic InstitutescoreStrategic or Co-development PartnerAcademia program partnership with top Israeli academic institutes including courses in state-of-the-art study labs built and supported by Microsoft, seminars, training sessions, and job opportunities for top students

Scale indicators5 records

Recent moves6 records

Expansion highlights6 records

Direct peers

• Check Point Software Technologies: Israeli-founded global cybersecurity vendor offering competing enterprise security products including cloud security, SIEM/XDR-adjacent offerings, and threat intelligence—comparable to ILDC's Sentinel, Defender for Cloud, and MSTIC portfolio, and shares the same Israeli cyber talent pool.
• CrowdStrike: Direct competitor to Microsoft Defender XDR and Sentinel; leading next-generation endpoint, identity, and cloud security vendor whose Falcon platform competes head-to-head with several ILDC-developed products sold through Microsoft.
• Palo Alto Networks: Competes with Microsoft Sentinel via its Cortex XSIAM SIEM and with Defender for Cloud via Prisma Cloud; comparable enterprise security portfolio and overlapping buyer base, making it a direct competitor for the products ILDC builds.
• SentinelOne: Israeli-founded XDR and endpoint security vendor that competes directly with Microsoft Defender XDR and benefits from the same Unit 8200 talent pipeline that feeds ILDC's security teams.
• Wiz: Israeli cloud security startup (acquired by Google) that competes with Microsoft Defender for Cloud in cloud workload protection and posture management; comparable Israeli-origin cloud security innovation competing with ILDC-developed Defender for Cloud.
• Cybereason: Israeli endpoint detection and response vendor that competes with Microsoft Defender XDR; shares Israeli cyber talent base with ILDC and was founded by Unit 8200 alumni.

Broad incumbents

• Google Israel R&D Center: Comparable strategic global R&D center operated by a US tech giant in Israel, contributing to cloud, AI, and security products; analogous in scale, talent pool, and strategic role within its parent, especially after acquiring Wiz.
• AWS (Amazon Web Services): Direct competitor to the Azure cloud platform that ILDC's products (Sentinel, Defender for Cloud, Kusto, Video Indexer) are built on; competes for the same enterprise security and AI workloads that ILDC enables.
• IBM Security: Enterprise security vendor with overlapping SIEM (QRadar), identity threat detection, and threat intelligence offerings that compete with Microsoft Sentinel, ITDR, and MSTIC.

Emerging players

• Elastic: Search and observability vendor whose Elasticsearch-based security analytics solutions overlap with Azure Data Explorer/Kusto use cases for SIEM and security log analytics, competing for budget within the same Microsoft Sentinel customer base.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks6 records

Key highlights7 records

Customer concentration

• Xx.com/microsoft
• YouTubeyoutube.com/channel/UCp892CjX6wps88JivisRMtA
• Facebookfacebook.com/MicrosoftRnDil
• LinkedInlinkedin.com/company/net2sky
• Instagraminstagram.com/microsoft_rnd_israel
• TikToktiktok.com/@microsoft_israel_rnd

Revenue estimate

Valuation estimate

Number of profiles

Profiles13 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Microsoft Israel R&D