Microsoft Visio: features, use cases and plans
October 24, 2026Microsoft OneDrive: features, use cases and plans
October 24, 2026
Microsoft product guide
Microsoft Defender
Microsoft Defender is Microsoft’s security family. It protects laptops, email, cloud apps and identities against malware, phishing and attacks, and shows IT what is happening in one place.
- Best for: any business with Microsoft 365 that wants endpoint and email protection
- Where it runs: devices, email and cloud
- Included in: Business Premium, E3 and E5 at different levels
- Standalone and add-on products are available
What Defender does for your business
The features clients ask about most, with an example of each in daily use.
Endpoint protection
Detects and blocks malware and ransomware on Windows, Mac, iOS and Android devices. In practice: A ransomware download is blocked and the laptop is isolated automatically.
Email and collaboration protection
Safe Links and Safe Attachments check messages and files before users open them. In practice: A phishing link in a fake invoice is blocked when clicked.
Automated investigation
Investigates alerts and fixes many threats without admin effort. In practice: A suspicious file is quarantined and removed from other devices.
Vulnerability management
Shows missing patches and risky settings across devices. In practice: Find laptops running an unpatched browser with known exploits.
Cloud app visibility
See and control which cloud apps staff use and what data is shared. In practice: Spot a staff member uploading files to an unapproved storage app.
One security portal
See alerts, incidents and devices in the Defender portal. In practice: IT reviews one incident view instead of five tools.
Which plans include Defender
Defender comes in several products. Business Premium includes Defender for Business. Larger plans include different levels.
| Plan | Defender version | Listing |
|---|---|---|
| Microsoft 365 Business Premium Includes Defender for Business and Defender for Office 365 Plan 1 | Included | View listing |
| Microsoft Defender for Business Endpoint security for small and mid-sized businesses | Standalone | View listing |
| Microsoft 365 E3 Includes Defender for Endpoint Plan 1 | Included | View listing |
| Microsoft 365 E5 Includes Defender for Endpoint Plan 2 and Defender for Office 365 Plan 2 | Included | View listing |
| Defender for Endpoint P2 Advanced endpoint detection and response | Standalone | View listing |
| Defender for Office 365 (Plan 2) Advanced email and collaboration protection | Add-on | View listing |
Variants of these plans without Teams, and Non-Profit and Education versions, are also available. Ask us and we will point you to the right one.
For IT buyers
Licensing and deployment notes
- Many products: Defender for Endpoint, Office 365, Identity, Cloud Apps and Vulnerability Management are separate products with different plans and prices.
- Business vs enterprise: Defender for Business is built for small and mid-sized organizations. Defender for Endpoint P1 and P2 are for larger environments.
- Onboarding: Devices must be onboarded through Intune, group policy or scripts. Without onboarding they are not protected.
- Alert handling: Decide who reviews alerts, or consider a managed service. Tools alone do not respond to incidents.
- Coexistence: Running another antivirus alongside Defender can reduce protection or cause conflicts. Plan the transition.
- Licensing fit: Check which Defender features your plan includes before buying add-ons so you do not pay twice.
Not sure which plan fits your team?
Tell us how many people need Defender and what they use it for, and we will recommend a plan.
Disclaimer: Microsoft may change features, pricing, plans or packaging at any time. Details here are a guide, not an offer; confirm current details on the listing or with us before you buy.
