Microsoft Defender for Endpoint Server [New Commerce Experience]
Microsoft Defender for Endpoint Server
Defender for Endpoint Server is the enterprise server licence for Microsoft's endpoint security platform. It covers traditional on-premises server workloads on Windows and Linux, with advanced detection and automatic attack disruption surfaced through the Microsoft Defender XDR console, and deep visibility into server activity including kernel and memory attack detection so response actions can run at scale. The licensing rule is the one to plan around: a separate licence is required for each server operating system environment, so the count is per operating system instance, including virtual machines, rather than per physical host.
What it is
Microsoft Defender for Endpoint Server extends Defender for Endpoint to server workloads. It is the enterprise line, distinct from Defender for Business Servers, which is the small business product.
Who it is for
Organisations running Windows or Linux servers, on-premises or as virtual machines, that already run Defender for Endpoint on their client estate and want servers in the same console and the same incident view.
Key capabilities
- Endpoint security for traditional on-premises server workloads, Windows and Linux
- Advanced detection and automatic attack disruption through Microsoft Defender XDR
- Deep visibility into server activity, including kernel and memory attack detection
- Response actions that can run at scale across the server estate
How it is counted
A separate licence is required for each server operating system environment. That means each operating system instance, virtual machines included, not each physical host. On a virtualised estate that distinction is usually the difference between a correct quote and a surprise.
Which server product applies to you
- Defender for Endpoint Server, this one, for organisations on the enterprise Defender for Endpoint line.
- Defender for Business Servers, for small organisations, requiring a Microsoft 365 Business Premium or Defender for Business licence and capped at 60 licences per customer.
- Microsoft Defender for Servers, the Azure product, where the server count is above the Defender for Business ceiling or the workload is cloud-hosted.
A licensing discount worth asking about
Microsoft documents a discount for organisations running both Defender for Endpoint and Microsoft Defender for Servers. If both are in play, raise it before the order rather than after.
How is it counted on a virtualised estate?
One licence per server operating system environment, which means each operating system instance including virtual machines, not each physical host. On a virtualised estate that is usually where quotes go wrong.
How is it different from Defender for Business Servers?
Defender for Business Servers is the small business product: it requires a Microsoft 365 Business Premium or Defender for Business licence and is capped at 60 licences per customer. This is the enterprise line with no such cap.
When does Microsoft Defender for Servers apply instead?
When the server count exceeds the Defender for Business ceiling, or the workload is cloud-hosted. Defender for Servers is the Azure product.
Does it see kernel-level activity?
Yes. It provides deep insight into server activities and covers kernel and memory attack detection, which is what enables response actions at scale.
Is there a discount for running it alongside Defender for Servers?
Microsoft documents licensing discounts for organisations holding both Defender for Endpoint and Microsoft Defender for Servers. Raise it before the order is placed.
- Vendor
- Microsoft
- Category
- Security
- Type
- SaaS
- Billing
- Monthly
- Commitment
- 1-Year
- Available terms
- 1-Year, Monthly
- Unit price
- €4.30 /mo
- SKU
- MST-NCE-132-C100
Attachable SKUs from the same category. Check each add-on's prerequisites for base-licence eligibility.
- 1You prepay through ITSailor (Malta). VAT handled, reverse-charge for valid EU VAT IDs.
- 2We provision through Pax8 wholesale into your Microsoft tenant, with no third-party MSP markup.
- 3You keep the tenant. Sovereign by default: every engagement closes with an Exit Kit.
Pax8 wholesale, margin in the price
Microsoft Defender Vulnerability Management Add-on (Education Student Pricing) [New Commerce Experience]
Microsoft Defender Vulnerability Management add-on is available to Defender for Endpoint Plan 2 customers to access continuous asset visibility, in-depth vulnerability assessments, and risk-based prioritization to help teams address critical vulnerabilities and misconfigurations.
Microsoft Entra ID P1 (Education Student Pricing) [New Commerce Experience]
Microsoft Entra ID P1 provides single sign-on to thousands of cloud (SaaS) apps and access to web apps you run on-premises. Built for ease of use, Microsoft Entra ID P1 features multi-factor authentication (MFA); access control based on device health, user location, and identity; and holistic security reports, audits,
Microsoft Entra ID P2 (Education Student Pricing) [New Commerce Experience]
Microsoft Entra ID P2 includes all the capabilities of P1 plus advanced identity protection features such as Identity Protection, which helps detect potential vulnerabilities affecting your organization’s identities, and Privileged Identity Management, which helps manage, control, and monitor access within your organiz
Microsoft Defender Vulnerability Management (Education Student Pricing) [New Commerce Experience]
Microsoft Defender Vulnerability Management standalone is a comprehensive vulnerability management solution to access continuous asset visibility, in-depth vulnerability assessments, and risk-based prioritization to help teams address critical vulnerabilities and misconfigurations.