Microsoft Defender for Endpoint Plan 1 (preview) and Plan 2

Microsoft Defender for Endpoint is an enterprise endpoint security platform designed to help enterprise networks prevent, detect, investigate, and respond to advanced threats. Defender for Endpoint provides advanced threat protection that includes antivirus, antimalware, ransomware mitigation, and more, together with centralized management and reporting. Soon, two plans will be available:

Compare Defender for Endpoint plans

The following table describes what's included in each plan at a high level.

Defender for Endpoint Plan 1
(preview)
Defender for Endpoint Plan 2
(available now)
Next-generation protection
(includes antimalware and antivirus)

Attack surface reduction

Manual response actions

Centralized management

Security reports

APIs

Defender for Endpoint Plan 1, plus:

Device discovery

Threat and vulnerability management

Automated investigation and response

Advanced hunting

Endpoint detection and response

Microsoft Threat Experts

Support for Windows 10, iOS, Android OS, and macOS devices Support for Windows (client and server) and non-Windows platforms
(macOS, iOS, Android, and Linux)
To try Defender for Endpoint Plan 1, visit https://aka.ms/mdep1trial. To try Defender for Endpoint Plan 2, visit https://aka.ms/MDEp2OpenTrial.

Important

Some information in this article relates to prereleased products/services that might be substantially modified before they are commercially released. Microsoft makes no warranties, express or implied, for the information provided here. This content includes links to other articles that might describe some features that are not included in Defender for Endpoint Plan 1 (preview).

Next steps