What are the differences between Cloud App Security, Office 365 Cloud App Security and Enhanced Cloud App Discovery in Azure AD?

Note

For information about Office 365 Cloud App Security, see Get started with Office 365 Cloud App Security.

Cloud App Security

Microsoft Cloud App Security is a comprehensive cross-SaaS solution bringing deep visibility, strong data controls and enhanced threat protection to your cloud apps. With this service, you can gain visibility into Shadow IT by discovering cloud apps in use and you can control and protect data in the apps once you sanction them to the service.

Office 365 Cloud App Security

Office 365 Cloud App Security is a subset of Cloud App Security that provides enhanced visibility and control for Office 365. This includes threat detection based on user activity logs, discovery of Shadow IT for apps that have similar functionality to Office 365 offerings and control app permissions to Office 365.

Feature support

Capability Feature Microsoft Cloud App Security Office 365 Cloud App Security
Cloud Discovery Discovered apps 15,000 + cloud apps 750+ cloud apps Cloud apps with similar functionality to Office 365
Deployment for discovery analysis Manual and automatic log upload Manual log upload
Log anonymization for user privacy Yes Yes
Access to full Cloud App Catalog Yes
Cloud app risk assessment Yes
Cloud usage analytics per app, user, IP address Yes
Ongoing analytics & reporting Yes
Anomaly detection for discovered apps Yes
Information Protection Data Loss Prevention (DLP) support Cross-SaaS DLP and data sharing control Uses existing Office DLP (available in Office E3 and above)
App permissions and ability to revoke access Yes Yes
Policy setting and enforcement Yes
Integration with Azure Information Protection Yes
Integration with third party DLP solutions Yes
Threat Detection Anomaly detection and behavioral analytics For Cross-SaaS apps including Office 365 For Office 365 apps
Manual and automatic alert remediation Yes Yes
SIEM connector Yes. Alerts and activity logs for cross-SaaS apps. Yes. Office 365 alerts only.
Integration to Microsoft Intelligent Security Graph Yes Yes
Activity policies Yes Yes

Enhanced Cloud App Discovery in Azure Active Directory

Cloud App Discovery in Azure AD is a subset of Cloud App Security that provides enhanced Cloud Discovery capabilities for Azure AD P1 and EMS E3 customers. This includes continuous discovery of Shadow IT and ongoing analytics and reporting.

Feature support

Capability Feature Microsoft Cloud App Security Cloud App Discovery
Cloud Discovery Discovered apps 15,000 + cloud apps 750+ cloud apps Cloud apps with similar functionality to Office 365
Deployment for discovery analysis Manual and automatic log upload Manual and automatic log upload
Log anonymization for user privacy Yes Yes
Access to full Cloud App Catalog Yes
Cloud app risk assessment Yes
Cloud usage analytics per app, user, IP address Yes Yes
Ongoing analytics & reporting Yes Yes
Anomaly detection for discovered apps Yes

See Also

Read about the basics in Getting started with Cloud App Security.
For technical support, go to the Cloud App Security assisted support page.
Premier customers also can choose Cloud App Security directly from the Premier portal.