Skip to content
Microsoft

Defender Suite for Business Premium: what it adds

Microsoft Defender Suite for Microsoft 365 Business Premium

SecuritySaaSMonthly1-Year
SKU MST-NCE-DSB-C100
Your price
Term
Billing cycle
€8.80

per user per month, excluding VAT

Ask a question

No markup on top of Pax8's suggested retail. My margin is the Pax8 wholesale discount.

Check whether your current plan already includes this: Licence Overlap Check, free, and nothing leaves your browser.

This is the security step up for organisations already on Microsoft 365 Business Premium. Business Premium already carries Microsoft Entra ID P1, Intune Plan 1, Defender for Business and Defender for Office 365 Plan 1; this add-on raises that layer, and notably brings Microsoft Entra ID P2, which is what adds Identity Protection, risk-based Conditional Access and Privileged Identity Management. Two conditions govern it and neither is optional: it requires a Microsoft 365 Business Premium base licence on the same user, and the add-on is capped at 300 seats. It is available on the commercial and non-profit offerings alike.

What it is

Microsoft Defender Suite for Microsoft 365 Business Premium is an add-on that lifts the security layer of Business Premium without moving the organisation to an enterprise plan.

Who it is for

Organisations of up to 300 users on Business Premium that have outgrown its security tier but do not want the cost or the migration of moving everyone to Microsoft 365 E5.

What Business Premium already gives you

Worth stating first, because it decides whether this add-on is the right purchase. Business Premium already includes Microsoft 365 Apps, Microsoft Entra ID P1, Microsoft Intune Plan 1, Microsoft Defender for Business, Microsoft Defender for Office 365 Plan 1, and Microsoft Purview Information Protection with data loss prevention.

What the Suite adds

The headline is identity. Microsoft Entra ID P2 is included with this add-on, and P2 is what brings Microsoft Entra ID Protection, risk-based Conditional Access, Privileged Identity Management, access reviews and entitlement management. On Business Premium alone none of those are available.

Requirements

A Microsoft 365 Business Premium base licence on the same user. The add-on is capped at 300 seats, matching the ceiling on Business Premium itself. It is offered on both the commercial and non-profit versions of Business Premium.

One thing to check before switching

If the organisation holds Microsoft Defender for Business Servers licences and moves all users to the Defender Suite, the server plan has to change too: Microsoft directs you to Defender for Endpoint for servers, or to Microsoft Defender for Servers. Plan that alongside the user move rather than after it.

Features
Microsoft Entra ID P2 on a Business Premium base
Identity Protection and risk-based Conditional Access
Privileged Identity Management, access reviews, entitlement management
Requires a Microsoft 365 Business Premium licence
Capped at 300 seats
Available on commercial and non-profit Business Premium
An alternative to moving the whole tenant to E5
Use cases
Reaching risk-based Conditional Access without leaving Business Premium
Removing standing administrative access with Privileged Identity Management
Running access reviews on a small tenant you can evidence
Delaying an E5 migration while raising the security tier now
FAQ
What does this add that Business Premium does not already have?

Chiefly Microsoft Entra ID P2, which brings Microsoft Entra ID Protection, risk-based Conditional Access, Privileged Identity Management, access reviews and entitlement management. Business Premium includes Entra ID P1 only.

Can I buy it without Microsoft 365 Business Premium?

No. It is an add-on and requires a Business Premium base licence on the same user. It is also capped at 300 seats, the same ceiling as Business Premium.

Is it available for non-profit organisations?

Yes. Microsoft offers the Defender Suite as an add-on for both the commercial and non-profit offerings of Microsoft 365 Business Premium.

How does this compare to just moving to Microsoft 365 E5?

It is the route that keeps the tenant on Business Premium. E5 brings the full enterprise security and compliance layer with no 300 user ceiling, so the comparison usually turns on headcount trajectory rather than on features alone.

Does it affect our Defender for Business Servers licences?

It can. If you move all users to the Defender Suite, Microsoft directs you to change the server plan to Defender for Endpoint for servers or Microsoft Defender for Servers. Plan the server side with the user move.

Plan details
Vendor
Microsoft
Category
Security
Type
SaaS
Billing
Monthly
Commitment
1-Year
Available terms
1-Year, Monthly
SKU
MST-NCE-DSB-C100
Works with

Add-ons Pax8 lists for this licence.

How buying works
  1. 1You request the licence, or add it to the cart.
  2. 2I confirm price, term and seats, and check your VAT number in VIES. Businesses in the EU only.
  3. 3You pay before we provision, under the CSP Marketplace Terms. The invoice comes from Michal Jatczak, a sole trader registered in Malta, trading as ITSailor. Reverse charge for an EU VAT number that validates in VIES.
  4. 4Your authorised signatory accepts the Microsoft Customer Agreement before activation.
  5. 5I place the order with Pax8 within one business day of payment.
Microsoft NCE termsNew Commerce Experience applies: within 7 days (168 hours) of purchase or renewal you may cancel or reduce seats; a cancellation we execute within the first 24 hours is refunded in full, anything later pro rata. We act in Malta business hours. After day 7 the term is binding. CSP Marketplace Terms.