Microsoft Defender for Endpoint

Microsoft's enterprise endpoint protection and EDR for Windows, macOS, Linux, Android and iOS.

PaidEndpoint security and EDR

Updated Nov 7, 2026 · AppBreakup editorial · Web, Windows, macOS, Linux, iOS, Android

Visit Microsoft Defender for Endpoint See 6 alternatives

Is Microsoft Defender for Endpoint free?

No, it's a paid product

Starting price:: $3 per user/month, paid yearly (Defender for Business)

Checked on Microsoft Defender for Endpoint's site Nov 8, 2026

Full Microsoft Defender for Endpoint pricing and plans

Switch from Microsoft Defender for Endpoint to

All 6

CrowdStrike Falcon
Starting price: $59.99 per device/year (Falcon Go, billed annually)
So
Sophos Endpoint
Paid
SentinelOne Singularity
Starting price: $179.99 per endpoint/year (Singularity Complete)

Verified facts: 7 of 7
Alternatives ranked: 6
Approved reviews: 0
Visits sent from here: 0

About Microsoft Defender for Endpoint

Microsoft Defender for Endpoint is Microsoft's business endpoint security platform. It builds on the Defender Antivirus engine that ships with Windows and adds attack surface reduction, endpoint detection and response, automated investigation, vulnerability management and automatic attack disruption, which tries to stop ransomware spreading between machines. It also protects Macs, Linux servers and iOS and Android devices, and its alerts feed into Microsoft Defender XDR alongside identity, email and cloud app signals. Licensing comes as Plan 1, Plan 2 and Microsoft Defender for Business for smaller companies; Plan 2 is part of Microsoft 365 E5, which is why many large organisations already have it. Security settings can be managed natively or through Intune. The main draw is integration and cost for Microsoft 365 customers, while drawbacks are complex licensing and a portal that assumes familiarity with Microsoft's security stack.

Best for: Microsoft 365 organisations that want EDR integrated with Intune, Entra ID and Defender XDR.

Microsoft Defender for Endpoint pricing (checked Nov 8, 2026)

Each line is quoted from Microsoft Defender for Endpoint's own site, with the page it came from.

Plan or term	What it says	Checked	Source
Starting price	$3 per user/month, paid yearly (Defender for Business)	Nov 8, 2026	microsoft.com
Defender Suite plan	$12 per user/month, paid yearly (needs Microsoft 365 E3)	Nov 8, 2026	microsoft.com
Microsoft 365 Business Premium plan	$22 per user/month, paid yearly	Nov 8, 2026	microsoft.com

Full Microsoft Defender for Endpoint pricing and cheaper alternatives

What works

Included in Microsoft 365 E5, so many companies already own it
Covers Windows, macOS, Linux, Android and iOS
Automatic attack disruption and native Intune integration

Why people leave

Plan 1, Plan 2 and Defender for Business licensing is confusing
Best experience assumes the wider Microsoft security stack
Advanced hunting and some features need Plan 2 or E5

Microsoft Defender for Endpoint vs CrowdStrike Falcon, Sophos Endpoint and SentinelOne Singularity

From each app's listing and the prices verified on its own site. A dash means we haven't verified it yet.

Attribute	Microsoft Defender for Endpoint	CrowdStrike Falcon	Sophos Endpoint	SentinelOne Singularity
Pricing	Paid	Paid	Paid	Paid
Verified price	$3 per user/month, paid yearly (Defender for Business)	$59.99 per device/year (Falcon Go, billed annually)	—	$179.99 per endpoint/year (Singularity Complete)
Free plan	No	No	No	No
Open source	No	No	No	No
Self-hostable	No	No	No	No
Platforms	Web, Windows, macOS, Linux, iOS, Android	Web, Windows, macOS, Linux	Web, Windows, macOS, Linux	Web, Windows, macOS, Linux, iOS, Android

Top Microsoft Defender for Endpoint alternatives

See all 6

1
CrowdStrike Falcon
Vendor-neutral EDR with self-serve bundles, popular when you don't want to depend on Microsoft.
83.8
2So
Sophos Endpoint
Partner-delivered protection with CryptoGuard rollback and an optional 24/7 MDR service.
71.3
3
SentinelOne Singularity
Autonomous agent with one-click rollback, independent of the Microsoft 365 licence stack.
62.6
4
Bitdefender GravityZone
Strong malware detection with lower per-endpoint cost, popular with small businesses and MSPs.
59.4
5
Cortex XDR
Palo Alto's XDR correlating endpoint, network and cloud data, a fit for teams already on Palo Alto firewalls.
57.5

Why people left Microsoft Defender for Endpoint

In reviewers' own words, from reviews of the apps they moved to. These are their opinions, not ours.

No switching stories yet. If you moved away from Microsoft Defender for Endpoint, review the app you switched to and tell us why.

Reviews

No approved reviews yet. How we verify reviewers

Write a review of Microsoft Defender for Endpoint

Your rating of Microsoft Defender for Endpoint

Name

Never shown publicly. A work email helps us verify you.

Title

Your review

What did you use it for, and what was good or bad? At least 40 characters.

Did you switch from another app?

Why did you leave it?

How can we verify you use it? (optional)

A GitHub username, your company domain, or say you can send a screenshot. Verified reviews count more.

I received money, credit or a gift for writing this review. (Incentivized reviews are shown but don't count toward rankings.)

By submitting, you confirm you're at least 16 and agree to our terms. Your name, rating, review and the date are published; your email isn't. See our privacy policy.

Microsoft Defender for Endpoint: common questions

What is Microsoft Defender for Endpoint?

Microsoft Defender for Endpoint: Microsoft's enterprise endpoint protection and EDR for Windows, macOS, Linux, Android and iOS. Best for microsoft 365 organisations that want EDR integrated with Intune, Entra ID and Defender XDR. Available for Web, Windows, macOS, Linux, iOS and Android.

Is Microsoft Defender for Endpoint free?

No, Microsoft Defender for Endpoint is a paid product. Starting price: $3 per user/month, paid yearly (Defender for Business) (checked on Microsoft Defender for Endpoint's own site).

How much does Microsoft Defender for Endpoint cost?

Microsoft Defender for Endpoint is a paid product. Starting price: $3 per user/month, paid yearly (Defender for Business); Defender Suite plan: $12 per user/month, paid yearly (needs Microsoft 365 E3); Microsoft 365 Business Premium plan: $22 per user/month, paid yearly. Checked on Microsoft Defender for Endpoint's own site, November 2026.

Is Microsoft Defender for Endpoint open source?

No, Microsoft Defender for Endpoint is not open source.

What platforms does Microsoft Defender for Endpoint run on?

Microsoft Defender for Endpoint is available for Web, Windows, macOS, Linux, iOS and Android.

What are the best alternatives to Microsoft Defender for Endpoint?

The highest-ranked Microsoft Defender for Endpoint alternatives right now are CrowdStrike Falcon, Sophos Endpoint and SentinelOne Singularity. See the full ranked list for pricing, platforms and verified facts.

Microsoft Defender for Endpoint vs CrowdStrike Falcon: what's the difference?

Both Microsoft Defender for Endpoint and CrowdStrike Falcon are paid products. Verified prices: Microsoft Defender for Endpoint $3 per user/month, paid yearly (Defender for Business), CrowdStrike Falcon $59.99 per device/year (Falcon Go, billed annually). Only Microsoft Defender for Endpoint runs on iOS and Android.

See all 6 Microsoft Defender for Endpoint alternatives

Microsoft Defender for Endpoint facts

7 of 7 verified

Operating systems: Windows, macOS, Linux, Android, iOS; Checked Nov 8, 2026learn.microsoft.com(opens source in a new tab); “supports the following operating systems: Windows, macOS, Linux, Android, and iOS.”
Licensing options: Plan 1, Plan 2, Defender for Business; Checked Nov 8, 2026learn.microsoft.com(opens source in a new tab); “Licensing Defender for Endpoint is available with several licensing options, including Defender for Endpoint Plan 1, Plan 2, and Microsoft Defender for Business.”
Included in: Microsoft 365 E5; Checked Nov 8, 2026learn.microsoft.com(opens source in a new tab); “Microsoft 365 E5 and Microsoft 365 E5 Security include Defender for Endpoint Plan 2.”
Ransomware disruption: Automatic attack disruption; Checked Nov 8, 2026microsoft.com(opens source in a new tab); “Automatic attack disruption Automatically disrupt ransomware”
Starting price: $3 per user/month, paid yearly (Defender for Business); Checked Nov 8, 2026microsoft.com(opens source in a new tab); “Defender for Business Business Plans Previous Next Microsoft Defender for Business $3.00 user/month, paid yearly”
Defender Suite plan: $12 per user/month, paid yearly (needs Microsoft 365 E3); Checked Nov 8, 2026microsoft.com(opens source in a new tab); “Microsoft Defender Suite $12.00 user/month, paid yearly (Annual subscription—auto renews) Requires: Microsoft 365 E3; or Office 365 E3 and Enterprise Mobility + Security E3.”
Microsoft 365 Business Premium plan: $22 per user/month, paid yearly; Checked Nov 8, 2026microsoft.com(opens source in a new tab); “Microsoft 365 Business Premium $22.00 user/month, paid yearly”