Each case study below is built from a real Evisent engagement — actual audit findings, actual cost recoveries, actual security outcomes. Client names, tenant identifiers, incumbent provider names and other identifying detail are anonymised. Headline figures are preserved because they're unidentifiable on their own and they're what gives the story weight.
Three published case studies below in full — a Microsoft 365 due-diligence audit, a Business Email Compromise incident response, and an AI inbox-management Build that Evisent runs in active use. Further client engagements are being prepared for publication with client approval through 2026. As each is approved and anonymised, it appears here.
An attacker compromised a Microsoft 365 account on 18 March, sat dormant for eight days, then sent 607 phishing emails to 560 recipients — including Australian Government departments, ASX-listed retailers, manufacturers and hospital networks — in 48 minutes. Evisent traced, contained and shut down the attack the same morning. No fraudulent payments were induced.
A 35-staff Australian wholesale business engaged Evisent for cost optimisation. We met the brief — $4,070/yr in unused licences recovered ahead of renewal. We also surfaced seven high-severity findings the client didn't know they had — including an incumbent IT provider's admin account with no MFA, signed into 17 staff workstations.
An AI-powered inbox manager built by Evisent and in active use. Reading and triaging email costs most professionals 2-4 hours a day. This automation classifies, routes, summarises and draft-replies through six processing layers, reclaiming around 3.5 hours a week, every week — and cutting inbox checks from ~25 a day to ~3.
A second Microsoft 365 audit engagement from earlier in 2026 is being prepared for publication. Anonymisation pass and client approval in progress.
The first AI Governance Bundle implementations are running through 2026. The quarterly governance reports from these engagements will form the basis for the first AI-side case studies.
Additional engagements across our verticals are being prepared for publication as they complete and as clients approve anonymised versions. Check back, or ask us directly for industry-specific examples.
We offer reduced engagement fees to clients who agree to be referenced (anonymised or named, your choice) in a published case study after delivery. The practical effect: your Sprint or Bundle pays back not just in operational outcomes, but in commercial value to your business if you'd benefit from being publicly associated with a forward-leaning AI governance posture.
Some clients prefer fully anonymous publication. Some — particularly those wanting to position themselves as forward-thinking in their industry — prefer to be named. Both work. We never publish without client review and explicit approval.