Microsoft Defender for Endpoint Pricing 2026
Complete pricing guide with plans, hidden costs, and cost analysis
Microsoft Defender for Endpoint costs $3/per user/month for Plan 1 (Basic). Plans range from $3 to $5.20/per user/month.
Microsoft Defender for Endpoint costs $3 to $5.20 per per user/month as of March 2026, with 2 plans available. Plans: Plan 1 (Basic) at $3/per user/month, and Plan 2 (Advanced) at $5.2/per user/month. Pricing depends on your chosen tier, contract length, and negotiated discounts.
Use the interactive pricing calculator to estimate your exact cost based on team size and requirements.
- Free tier: No free tier available
Microsoft Defender for Endpoint offers 2 pricing tiers: Plan 1 (Basic), Plan 2 (Advanced). Paid plans include Plan 1 (Basic) at $3/per user/month, Plan 2 (Advanced) at $5.2/per user/month. The Plan 2 (Advanced) plan is general users and teams.
Compared to other endpoint security software, Microsoft Defender for Endpoint is positioned at the budget-friendly price point.
- 5 documented hidden costs beyond list price
How much does Microsoft Defender for Endpoint cost?
Microsoft Defender for Endpoint Pricing Overview
Microsoft Defender for Endpoint has 2 pricing plans ranging from $3 to $5.20/per user/month. The Plan 1 (Basic) plan costs $3/per user/month, best for general users and teams. The Plan 2 (Advanced) plan costs $5.20/per user/month, best for general users and teams.
There are at least 5 documented hidden costs beyond Microsoft Defender for Endpoint's list price, including implementation, training, and add-on fees.
This pricing was last verified in February 4, 2026 from 1 independent sources.
Microsoft Defender for Endpoint offers two pricing tiers: Plan 1 at $3 per user/month and Plan 2 at $5.20 per user/month. Plan 1 covers basic endpoint protection with next-generation antimalware and attack surface reduction. Plan 2 adds automated investigation and response, endpoint detection and response (EDR), and threat analytics. Both plans are included with certain Microsoft 365 E3 and E5 licenses, which can significantly reduce standalone costs for organizations already in the Microsoft ecosystem.
All Microsoft Defender for Endpoint Plans & Pricing
| Plan | Monthly | Annual | Best For |
|---|---|---|---|
| Plan 1 (Basic) | $3 /per user/month | $3 /per user/year | General users and teams |
| Plan 2 (Advanced) | $5.2 /per user/month | $5.2 /per user/year | General users and teams |
View all features by plan
Plan 1 (Basic)
- Essential protection with real-time antivirus, antimalware, attack surface reduction, and manual response actions for Windows devices.
Plan 2 (Advanced)
- Advanced threat protection with automated investigation and response, threat and vulnerability management, and cross-platform support (Windows, macOS, Linux, iOS, Android).
Microsoft Defender for Endpoint Year 1 Total Cost by Company Size
Real deployment costs including licenses, implementation, training, and admin — not just the sticker price.
A small business with 25 users and mixed Windows/Mac endpoints using Defender for Endpoint Plan 1 for basic protection.
A company with 200 users protecting approximately 400 devices (2 devices per user on average) using Plan 2 for advanced threat protection.
Large enterprise with 1,000 users and 2,500 total devices using Plan 2 with 20% volume discount through Enterprise Agreement.
Organization already using Microsoft 365 E5, which includes Defender for Endpoint Plan 2 at no additional cost.
How Microsoft Defender for Endpoint Pricing Compares
| Software | Starting Price | Top Price |
|---|---|---|
| Microsoft Defender for Endpoint | $3/per user/month | $5.2/per user/month |
| Carbon Black | $36/per endpoint/year | $90/per endpoint/year |
| CrowdStrike Falcon | $59.99/per device/year | $184.99/per device/year |
| Malwarebytes | Custom | Custom |
| Sophos Intercept X | $28/per user/year | $79/per user/year |
Microsoft Defender for Endpoint Pricing FAQ
01 What's the difference between Plan 1 and Plan 2?
Plan 1 ($3/user/month) provides basic endpoint protection for Windows devices only. Plan 2 ($5.20/user/month) adds automated investigation, vulnerability management, and support for non-Windows platforms including macOS, Linux, iOS, and Android.
02 How many devices does each license cover?
Each user license allows protection of up to 5 devices. This includes any combination of Windows PCs, Macs, Linux systems, iOS devices, and Android devices.
03 Is Microsoft Defender for Endpoint included in Microsoft 365?
Defender for Endpoint P1 is included in Microsoft 365 E3. Defender for Endpoint P2 is included in Microsoft 365 E5. Both can also be purchased standalone.
04 Are volume discounts available?
Yes, Microsoft offers volume licensing agreements (EA, EAS, SCE) that provide discounted pricing for organizations with 500+ users. Discounts typically range from 10-30% depending on commitment level.
05 What about server protection?
Servers require separate licensing through Microsoft Defender for Servers (part of Defender for Cloud). Pricing is per server rather than per user, typically $15/server/month.
06 Is there a free trial available?
Yes, Microsoft offers a free 90-day trial of Defender for Endpoint Plan 2 for qualified organizations. The trial includes full functionality and supports up to 50 devices.
Is this pricing incorrect? — we verify and update within 24 hours.