People standing around a conference table talking

baseVISION unifies Axpo’s security infrastructure with Microsoft

Axpo, a Swiss leader in energy solutions, needed to bring their vast and diverse infrastructure under one endpoint solution. Enter baseVISION and Microsoft Defender for Endpoint.

June 16, 2025

When Axpo, one of Switzerland’s largest power producers and a global leader in energy trading, set out to strengthen their security framework, the stakes were high. With operations spanning over 30 countries and a workforce of 7,000 employees, Axpo’s infrastructure was both vast and complex.

To expand their sustainable energy mission, they needed a scalable migration strategy that would unify their infrastructure while improving their overall endpoint security management. That’s why they chose baseVISION—a Microsoft Solutions Partner for Security delivering tailored, end-to-end solutions with the Microsoft Security stack—to help them develop their strategy and turn it into action.

Since 2016, the four-time Microsoft Partner of the Year Award winner has been protecting businesses from increasingly sophisticated cyberthreats, all while empowering them to operate securely and confidently in the evolving digital landscape.

A complex infrastructure—and a tight timeline

Axpo’s goals were ambitious: to unify their endpoint security solution under Microsoft Defender for Endpoint, streamline operations, and achieve single-pane-of-glass management for all client and server endpoints—all so they could centrally manage Endpoint Detection and Response (EDR) policies and alerts, improve detection accuracy, and reduce false positives.

To achieve these goals, Axpo needed to migrate about 2,800 servers from their current provider to Defender for Endpoint within a three-month timeframe. However, Axpo’s vast and diverse infrastructure added a layer of complexity: 75% of their servers were hosted on-premises, 10% were already in Microsoft Azure with Defender for Servers in place, and the remaining servers were scattered across isolated networks and legacy systems. On top of that, they had:

A mix of Windows and Linux OS versions and distributions.
More than 10 distinct environments, distributed across multiple geographic locations.
Management by various internal teams and external providers.
Multiple Active Directory domains.
A variety of system management and configuration approaches.

Despite the complexities, baseVISION was equipped to tackle the challenge head-on. “We were confident that our expertise would enable us to support Axpo effectively, even within a demanding timeframe,” said Alex Verboon, CTO at baseVISION. “By leveraging our deep understanding of Microsoft endpoint management and security technologies, we crafted a tailored strategy and executed a seamless migration—significantly strengthening Axpo’s security posture.”

“By leveraging our deep understanding of Microsoft endpoint management and security technologies, we crafted a tailored strategy and executed a seamless migration.”

—Alex Verboon, CTO, baseVISION

End-to-end support for a stronger endpoint solution

Axpo turned to baseVISION for their deep expertise in Microsoft endpoint management and security solutions. Their collaboration began with a robust planning phase. baseVISION worked closely with Axpo’s teams to gather detailed information about all environments where servers resided, including server hostnames, operating systems, update and patch management processes, and platform ownership.

Documentation also played a crucial role in the migration’s success. baseVISION meticulously outlined the technical prerequisites—including connectivity requirements, supported operating systems, and patch levels—verifying these details with key stakeholders. This ensured the migration plan addressed Axpo’s unique needs while minimizing risks.

In parallel, baseVISION developed a Defender Configuration Management Blueprint, a comprehensive guide to onboarding servers to Microsoft Defender for Endpoint. The blueprint detailed configuration settings for Defender Antivirus and EDR, along with deployment and management processes.

With the groundwork laid, Axpo and baseVISION moved into the migration planning phase. baseVISION created a Migration Runbook, a guide that outlined the schedule, informed stakeholders, and ensured alignment across teams.

“The close and competent cooperation with the internal stakeholders across national borders and time zones was the cornerstone that made this time-critical endeavor possible in the first place,” said Thomas Oehen, Security Engineer at baseVISION.

baseVISION then tackled the complexities of migrating 2,800 servers in record time, adhering to the plan laid out in the runbook. They overcame obstacles stemming from isolated legacy systems and the integration of both on-premises and cloud environments to ensure a seamless transition for Axpo’s diverse infrastructure. Without a doubt, baseVISION played a crucial role in the migration execution for Axpo.

Person wearing a hardhat looking at a tablet

“baseVISION was instrumental in supporting us in this project. Their experience and expertise allowed us to create a plan and tackle large volumes of workloads in a short timeframe.”

—Mark Campbell, Information Security Architect, Axpo

Strategic alignment and end-to-end modernization

“Ultimately, with the support of baseVISION, we were able to achieve our goal of unifying our server endpoint protection,” said Mark Campbell, who led the initiative at Axpo, “which has resulted in more streamlined operations and a holistic overview and unified platform for security monitoring, protection, and prevention.”

The collaboration between Axpo and baseVISION yielded impressive results all around.

Graphic showing quantitative and qualitative benefits of Microsoft Defender for Endpoint including faster migration improved detection cost optimization and streamlined operations

As part of their long-term Zero Trust journey, Axpo had already built a strong foundation with the Microsoft E5 security suite. Axpo originally planned to use Microsoft Defender for Endpoint for client devices and a third-party solution for servers. However, they realized they could use Microsoft Defender for Cloud for both their cloud-native and on-premises workloads—reshaping the company’s vision for a unified security landscape.

"Microsoft is our foundational partner for Axpo's Zero Trust architecture strategy," Campbell added. “With the deployment of Defender for Cloud as a Cloud Security Posture Management and Cloud Workload Protection platform for Azure native platform services, we made the strategic decision to also leverage Defender for Servers P2, which includes XDR capabilities."

This decision required compressed timelines and intensive coordination for implementation and deployment, and “baseVISION was instrumental in supporting us in this project with aggressive timelines and corner-case complexities,” said Campbell. “Their experience and expertise in the Defender for Endpoint suite allowed us to create a plan and tackle large volumes of workloads in a short timeframe.”

Axpo’s successful migration was more than just an endpoint security upgrade—it was a testament to the power of strategic alignment and trusted partnerships. With their unified, Microsoft-based security landscape, Axpo is now better equipped to pursue their long-term Zero Trust journey while delivering innovative energy solutions that meet their customers’ evolving needs. And with baseVISION by their side, they’ve built a strong foundation for sustainable growth and security to support them along the way.

Explore more Partner Success stories

Discover how organizations like yours are using Microsoft technology to help customers solve challenges, drive results, and scale their businesses.

Browse all stories

This document is for informational purposes only. MICROSOFT MAKES NO WARRANTIES, EXPRESS OR IMPLIED, IN THIS SUMMARY.