Microsoft Defender

Endpoint detection and response, threat analytics, and advanced hunting.

Safe Links rewrites and checks links at click time to help protect users from malicious URLs in email and collaboration experiences.

Alert Policies let administrators define conditions that generate alerts when important security, compliance, or activity events occur.

Audit (standard) records and exposes user, administrator, and service activity so teams can investigate changes, access, and compliance events.

Defender for Office 365 Plan 2 helps protect mail and collaboration experiences from phishing, malware, malicious links, suspicious users, and related security threats.

Attack Simulation Training helps protect mail and collaboration experiences from phishing, malware, malicious links, suspicious users, and related security threats.

Automated Investigation & Response helps protect mail and collaboration experiences from phishing, malware, malicious links, suspicious users, and related security threats.

Campaign Views helps protect mail and collaboration experiences from phishing, malware, malicious links, suspicious users, and related security threats.

Compromised User Detection helps protect mail and collaboration experiences from phishing, malware, malicious links, suspicious users, and related security threats.

Threat Explorer helps protect mail and collaboration experiences from phishing, malware, malicious links, suspicious users, and related security threats.

Threat Trackers helps protect mail and collaboration experiences from phishing, malware, malicious links, suspicious users, and related security threats.

Defender for Office 365 Plan 1 helps protect mail and collaboration experiences from phishing, malware, malicious links, suspicious users, and related security threats.

Advanced Anti-Phishing helps protect mail and collaboration experiences from phishing, malware, malicious links, suspicious users, and related security threats.

Real-Time Reports helps protect mail and collaboration experiences from phishing, malware, malicious links, suspicious users, and related security threats.

Safe Attachments checks email attachments and collaboration files in a protected environment before users open potentially malicious content.

eDiscovery (standard) helps compliance teams find, preserve, collect, review, and export Microsoft 365 content for investigations or legal discovery.

Copilot File Upload supports Copilot or AI-assisted work, helping users create, summarize, analyze, automate, or extend Microsoft 365 content and workflows.

Office 365 Cloud App Security helps organizations protect users, devices, identities, apps, or data against security threats.

Safe Links Lite (announced) helps protect mail and collaboration experiences from phishing, malware, malicious links, suspicious users, and related security threats.

Secure Score helps organizations protect users, devices, identities, apps, or data against security threats.

App Governance helps discover, monitor, govern, and protect cloud app usage across the organization.

Defender for Cloud Apps helps discover, monitor, govern, and protect cloud app usage across the organization.

Cloud App Discovery helps discover, monitor, govern, and protect cloud app usage across the organization.

Application Control helps secure, manage, deploy, or improve Windows devices and user experiences in an organization.

AppLocker helps secure, manage, deploy, or improve Windows devices and user experiences in an organization.

BitLocker helps secure, manage, deploy, or improve Windows devices and user experiences in an organization.

BitLocker to Go helps secure, manage, deploy, or improve Windows devices and user experiences in an organization.

Defender Antivirus helps organizations protect users, devices, identities, apps, or data against security threats.

Advanced Hunting helps organizations protect users, devices, identities, apps, or data against security threats.

Threat Analytics helps protect and investigate endpoints through threat prevention, detection, vulnerability insight, and response workflows.

Defender Vulnerability Management (core) helps protect and investigate endpoints through threat prevention, detection, vulnerability insight, and response workflows.

Remediation Tracking helps organizations protect users, devices, identities, apps, or data against security threats.

Risk Based Prioritization helps detect identity risks, suspicious sign-in activity, and identity-based threats so administrators can respond quickly.

Software Inventory helps organizations protect users, devices, identities, apps, or data against security threats.

Software Usage Insights supports employee experience scenarios such as communications, engagement, learning, analytics, goals, or organizational feedback.

Vulnerability Assessment helps protect and investigate endpoints through threat prevention, detection, vulnerability insight, and response workflows.

Windows Firewall helps secure, manage, deploy, or improve Windows devices and user experiences in an organization.

Agent Security supports Copilot or AI-assisted work, helping users create, summarize, analyze, automate, or extend Microsoft 365 content and workflows.

Safe Documents helps organizations protect users, devices, identities, apps, or data against security threats.

Security Copilot supports Copilot or AI-assisted work, helping users create, summarize, analyze, automate, or extend Microsoft 365 content and workflows.

Compliance Premium Assessments helps organizations protect users, devices, identities, apps, or data against security threats.

Defender EASM helps organizations protect users, devices, identities, apps, or data against security threats.

Defender CSPM helps organizations protect users, devices, identities, apps, or data against security threats.

Defender for Business helps organizations protect users, devices, identities, apps, or data against security threats.

Defender for Business Servers helps organizations protect users, devices, identities, apps, or data against security threats.

Defender for Cloud helps organizations protect users, devices, identities, apps, or data against security threats.

Defender for Servers helps organizations protect users, devices, identities, apps, or data against security threats.

Defender Suite helps organizations protect users, devices, identities, apps, or data against security threats.

Defender Threat Intelligence (retiring) helps organizations protect users, devices, identities, apps, or data against security threats.

Defender Threat Intelligence API helps organizations protect users, devices, identities, apps, or data against security threats.

Defender Vulnerability Management (premium) helps protect and investigate endpoints through threat prevention, detection, vulnerability insight, and response workflows.

Block Vulnerable Applications helps organizations protect users, devices, identities, apps, or data against security threats.

Browser Extensions Assessment helps organizations protect users, devices, identities, apps, or data against security threats.

Digital Certificate Assessment helps organizations protect users, devices, identities, apps, or data against security threats.

Hardware & Firmware Assessment helps organizations protect users, devices, identities, apps, or data against security threats.

Network Share Analysis helps organizations protect users, devices, identities, apps, or data against security threats.

Security Baselines Assessment helps organizations protect users, devices, identities, apps, or data against security threats.

Microsoft Sentinel helps organizations protect users, devices, identities, apps, or data against security threats.

Purview Suite helps organizations protect users, devices, identities, apps, or data against security threats.

Defender Experts for Hunting helps organizations protect users, devices, identities, apps, or data against security threats.

Defender Experts for XDR helps organizations protect users, devices, identities, apps, or data against security threats.