• The frontline worker–priced equivalent of Defender for Office 365 Plan 1, protecting email and collaboration tools against advanced threats such as phishing and business email compromise. Includes Safe Attachments, Safe Links, and anti-phishing policies — a cost-effective baseline of threat protection for shift-based, deskless staff.

  • The frontline worker–priced equivalent of Defender for Office 365 Plan 2, protecting email, documents, and collaboration tools against advanced threats like phishing and business email compromise. Adds threat hunting, automation, attack simulation training, and cross-domain XDR capabilities on top of the F1 tier — sized and priced for shift-based, deskless staff.

  • Bundles Microsoft's E5-level security stack — Entra ID P2, Defender for Identity, Defender for Endpoint Plan 2, Defender for Office 365 Plan 2, and Defender for Cloud Apps — into a single add-on. Gives comprehensive identity, endpoint, email, and cloud app protection at a lower combined cost than licensing each component separately.

  • Bundles Microsoft's E5-level security stack — Entra ID P2, Defender for Identity, Defender for Endpoint Plan 2, Defender for Office 365 Plan 2, and Defender for Cloud Apps — into a single add-on, purchased on a 3-year term. Gives comprehensive identity, endpoint, email, and cloud app protection at a lower combined cost than licensing each component separately.

  • A frontline worker–priced edition of the Defender Suite (formerly the E5 Security add-on), bundling Entra ID P2, Defender for Identity, Defender for Endpoint Plan 2, Defender for Office 365 Plan 2, and Defender for Cloud Apps — extending enterprise-grade identity, device, email, and cloud app protection to shift-based and deskless staff at a reduced cost.

  • An add-on that layers E5-level threat protection onto Business Premium. Adds Entra ID P2 (identity protection and governance), Defender for Identity, Defender for Endpoint Plan 2 (full EDR, threat hunting), Defender for Office 365 Plan 2 (automated investigation and attack simulation), and Defender for Cloud Apps — giving SMBs enterprise-grade security across identities, devices, email, and cloud apps at a fraction of the enterprise cost.

  • Full vulnerability management capabilities for any EDR solution — not just Defender for Endpoint. Includes device discovery and inventory, risk-based vulnerability assessment, configuration and security baseline assessment, and remediation tracking. Suited to organisations that need comprehensive vulnerability management but don't already have Defender for Endpoint Plan 2 as the underlying EDR

  • An add-on for Defender for Endpoint Plan 2 customers, extending core vulnerability management with premium capabilities: security baseline assessment, blocking known vulnerable applications, browser extension inventory, digital certificate assessment, and network share analysis. Gives security teams deeper, more proactive visibility into an organisation's attack surface beyond the core Plan 2 vulnerability tools.

  • A frontline worker–priced edition of Microsoft Defender Vulnerability Management, giving continuous asset discovery, risk-based vulnerability assessment, and prioritised remediation guidance across devices — extended to shift-based and deskless staff at a reduced cost compared to the standard offering.

  • The frontline worker edition of Microsoft Entra ID, providing core identity and access management — single sign-on, Conditional Access, and multi-factor authentication — sized and priced for shift-based, deskless staff rather than standard knowledge workers.

  • Microsoft's foundational identity and access management tier, providing Conditional Access, multi-factor authentication, self-service password reset, and hybrid identity integration with on-premises Active Directory. The baseline security layer for controlling how users and devices access company resources — included in Microsoft 365 Business Premium and E3.

  • Adds adaptive, risk-based security on top of Entra ID P1. Includes Identity Protection with machine-learning-driven sign-in and user risk detection, Privileged Identity Management (PIM) for just-in-time privileged access, and access reviews — suited to organisations needing more proactive, automated identity threat response. Included in Microsoft 365 E5.