Core endpoint protection for devices, including next-generation antivirus, attack surface reduction rules, device control, endpoint firewall, network protection, and application control. The foundational tier of Defender for Endpoint — available standalone or as part of Microsoft 365 E3 — upgradable to Plan 2 for full EDR and automated response capabilities.