Skip to content
Microsoft

Microsoft Defender for Business: scope and limits

Microsoft Defender for Business

SecuritySaaSMonthly1-Year
SKU MST-NCE-MDE-C100
Your price
Term
Billing cycle
€2.70

per user per month, excluding VAT

Ask a question

No markup on top of Pax8's suggested retail. My margin is the Pax8 wholesale discount.

Check whether your current plan already includes this: Licence Overlap Check, free, and nothing leaves your browser.

Microsoft Defender for Business is Microsoft's endpoint security product for organisations of up to 300 users. It is built on Microsoft Defender for Endpoint and carries next-generation protection, attack surface reduction, endpoint detection and response, automated investigation and remediation, and core vulnerability management. In capability terms it sits above Defender for Endpoint Plan 1 and close to Plan 2, with a simplified configuration and device onboarding path aimed at teams without a dedicated security operations function. It is included in Microsoft 365 Business Premium, and can be bought on its own alongside plans such as Microsoft 365 Business Basic, Microsoft 365 Business Standard or Office 365 E1.

What it is

Microsoft Defender for Business is an endpoint security product based on Microsoft Defender for Endpoint, scoped and priced for small and medium organisations. It protects devices against ransomware, malware, phishing and other threats.

Who it is for

Organisations of up to 300 users. Above that ceiling Microsoft directs customers to a subscription that includes Defender for Endpoint for all users instead.

Key capabilities

  • Next-generation antimalware protection
  • Attack surface reduction rules
  • Endpoint detection and response
  • Automated investigation and remediation
  • Core vulnerability management
  • Simplified configuration and device onboarding
  • Cross-platform coverage including Windows, macOS, iOS and Android

How it compares

Against Defender for Endpoint Plan 1, Defender for Business adds endpoint detection and response, automated investigation and remediation, threat analytics and core vulnerability management, none of which are in Plan 1. Against Plan 2 it is close but not identical: Plan 2 adds six months of data retention with advanced hunting, and Microsoft Threat Experts.

Requirements

The product is limited to organisations of up to 300 users. Protection for Windows and Linux servers is available but needs additional server licences.

Features
Next-generation antimalware protection
Attack surface reduction rules
Endpoint detection and response
Automated investigation and remediation
Core vulnerability management
Simplified configuration and onboarding
Limited to organisations of up to 300 users
Use cases
Adding endpoint detection and response to a small organisation without a security operations team
Protecting devices for a Microsoft 365 Business Basic or Business Standard tenant
Replacing a third-party antivirus product with a Microsoft endpoint security product
Getting vulnerability visibility across a small and mixed device estate
FAQ
How does Defender for Business compare to Defender for Endpoint Plan 1?

Defender for Business includes everything in Plan 1 and adds endpoint detection and response, automated investigation and remediation, threat analytics and core vulnerability management. Plan 1 has none of those four.

How does it compare to Defender for Endpoint Plan 2?

It is close. Plan 2 adds six months of data retention with advanced hunting, and Microsoft Threat Experts. Defender for Business covers most other Plan 2 capabilities and adds a simplified configuration experience.

What happens if the organisation passes 300 users?

Defender for Business and Microsoft 365 Business Premium are both capped at 300 users. Microsoft recommends moving to a subscription that includes Defender for Endpoint for all users, such as Microsoft 365 E3 or E5, or Defender for Endpoint Plan 1 or Plan 2.

Is it already included in Microsoft 365 Business Premium?

Yes. Business Premium includes Defender for Business. This standalone licence is for organisations on other plans, such as Microsoft 365 Business Basic, Microsoft 365 Business Standard or Office 365 E1.

Does it protect servers?

Server protection is available but is not part of this licence. Windows and Linux server coverage requires additional server licences.

Plan details
Vendor
Microsoft
Category
Security
Type
SaaS
Billing
Monthly
Commitment
1-Year
Available terms
1-Year, Monthly
SKU
MST-NCE-MDE-C100
How buying works
  1. 1You request the licence, or add it to the cart.
  2. 2I confirm price, term and seats, and check your VAT number in VIES. Businesses in the EU only.
  3. 3You pay before we provision, under the CSP Marketplace Terms. The invoice comes from Michal Jatczak, a sole trader registered in Malta, trading as ITSailor. Reverse charge for an EU VAT number that validates in VIES.
  4. 4Your authorised signatory accepts the Microsoft Customer Agreement before activation.
  5. 5I place the order with Pax8 within one business day of payment.
Microsoft NCE termsNew Commerce Experience applies: within 7 days (168 hours) of purchase or renewal you may cancel or reduce seats; a cancellation we execute within the first 24 hours is refunded in full, anything later pro rata. We act in Malta business hours. After day 7 the term is binding. CSP Marketplace Terms.