Clients often ask if they are protected against viruses and malware. We recommend all clients with PCs or Macs purchase Microsoft 365 Business Premium. This includes enhanced protection when compared to the bundled version which is included with Windows 11.
Defender for Endpoint is also available as part of Microsoft Defender for Endpoint Plan 1, or the Microsoft 365 E5 Security addon, typically added to e.g. Office 365 E3 subscriptions.
This article compares the versions, and answers the licensing question that usually comes up first: which of them is actually included in Business Premium.
Yes — Business Premium includes Defender for Business, Microsoft’s small-business edition of Defender for Endpoint. It is built on the same engine and covers endpoint detection and response (EDR), threat and vulnerability management, and automated investigation and remediation, but it is licensed and managed separately from the enterprise Defender for Endpoint Plan 1 and Plan 2 SKUs.
Which edition you get depends on the licence:
| Licence | Endpoint protection included |
|---|---|
| Microsoft 365 Business Basic / Standard | Microsoft Defender built into Windows only |
| Microsoft 365 Business Premium | Defender for Business |
| Office 365 E3 / Microsoft 365 E3 + Defender for Endpoint Plan 1 add-on | Defender for Endpoint Plan 1 |
| Microsoft 365 E5, or E3 + E5 Security add-on | Defender for Endpoint Plan 2 |
| Bought standalone | Defender for Business, or Defender for Endpoint Plan 1 / Plan 2 |
Defender for Business is intended for organisations of up to 300 users. Beyond that you move to the enterprise SKUs, where the extra capability is mainly advanced hunting, custom detection rules, and management through Microsoft Defender XDR rather than the simplified Defender portal.
This is the default antivirus and antimalware solution built into Windows 11 and comes at no extra cost.
This is a cloud-powered enterprise-grade security platform designed for businesses.
| Feature | Microsoft Defender | Defender for Business | Defender for Endpoint |
|---|---|---|---|
| Antivirus & Antimalware | ✅ Basic | ✅ Advanced + AI-powered | ✅ Advanced + AI-powered |
| Endpoint Detection & Response | ❌ | ✅ | ✅ |
| Threat & Vulnerability Mgmt | ❌ | ✅ | ✅ |
| Centralized Management | ❌ | ✅ Simplified SMB portal | ✅ Full Defender XDR |
| Automated Investigation | ❌ | ✅ | ✅ |
| Advanced Hunting & Custom Detections | ❌ | ❌ | ✅ |
| Integration with Microsoft 365 | ❌ | ✅ | ✅ |
| Device Health Monitoring | ❌ | ✅ | ✅ |
| Ideal Use Case | Personal / Unmanaged | SMB (up to 300 users) | Business / Enterprise |
If you’re running a small business or managing multiple devices, Defender for Endpoint offers a serious upgrade in visibility, control, and protection, so we recommend this for all our customers.
| Product | Licensing | Approx. Cost (per user/month) |
|---|---|---|
| Microsoft Defender (built-in) | Included with Windows 11 | Free |
| Defender for Business | Included with Microsoft 365 Business Premium; also sold standalone | Included in Business Premium (~$3 standalone) |
| Defender for Endpoint Plan 1 | Add-on to Office 365 E3 / Microsoft 365 E3 | ~$2-3 (add-on) |
| Defender for Endpoint Plan 2 | Included with Microsoft 365 E5; or E3 + E5 Security add-on | ~$5-7 (add-on) |
For most small to medium businesses, Microsoft 365 Business Premium is the most cost-effective route: Defender for Business alongside Office apps, Exchange, Teams and Intune, for roughly what the standalone endpoint licence costs on its own.
Not sure which protection level is right for you? Contact Cloudrun for a free security assessment and licensing review.
In 2024, Microsoft rebranded many security products under the “Microsoft Defender” umbrella. What was previously called “Microsoft Defender for Endpoint” is now part of the unified Microsoft Defender portfolio. You may also see it referred to as Defender for Business (the SMB-focused SKU included in Business Premium). The core capabilities remain the same regardless of the name.
