Microsoft Defender for Endpoint
Included in
Derived from the service plans Microsoft provisions with each SKU — Microsoft publishes no product-in-bundle mapping.
Commercial
- Microsoft 365 E5 +10 variants
- Microsoft 365 E5 Security
- Microsoft 365 E5 Security for EMS E5
- Microsoft 365 E7
- Microsoft 365 F5 Security + Compliance Add-on
- Microsoft 365 F5 Security Add-on
- Microsoft 365 Security and Compliance for Firstline Workers
- Microsoft Defender for Endpoint F2
- Microsoft Defender for Endpoint P2_XPLAT
- Microsoft Defender for Endpoint Server
- Windows 10/11 Enterprise E5 +1 variant
- Windows 10/11 Enterprise E5 Commercial (GCC Compatible)
GCC
Education
What's included
Curated capability groupings first, then every remaining service plan Microsoft provisions with this SKU — together they're the complete list, nothing is hidden.
| Security |
|---|
| Defender for Endpoint Plan 2 Endpoint detection and response, threat and vulnerability management, and attack surface reduction for Windows, macOS, Linux, iOS, and Android devices. Endpoint detection and response: attack surface reduction, behavioral monitoring, and automated investigation/remediation for Windows, macOS, Linux, iOS, and Android devices. |
| Other service plans |
| Exchange Foundation The baseline Exchange Online mailbox service included in most Microsoft 365 plans — hosted email, calendar, and contacts. |
Defender for Endpoint