During its Ignite conference on Tuesday, Microsoft shared a progress update on its Secure Future Initiative (SFI), introduced a year ago, which included significant measures such as enforcing multi-factor authentication (MFA) by default for new tenants, isolating close to 100,000 work devices under conditional access policies, and blocking GitHub secrets from exposure.

The progress report, structured around Microsoft’s customary six engineering pillars used to assess its advancements, presents a more promising outlook compared to a previous, September update that themed around credentials rotation, JIT/JEA access controls, and threat monitoring.

“In May 2024, Microsoft CEO Satya Nadella made security the company’s top priority,” Microsoft said in the report. “Since that time, we have dedicated the equivalent of 34,000 engineers to advance the objectives laid out in SFI, making it the largest cybersecurity engineering project in history.”