Skip to content

Table of contents

Collapse all

Microsoft Defender for Office 365

Overview

Microsoft Defender for Office 365 protects against malicious threats found in email and other collaboration tools such as Teams, SharePoint and OneDrive. It scans file attachments, checks links, and blocks phishing emails.  It was formerly known as Office 365 Advanced Threat Protection (0365 ATP).

Licensing

There are two User SLs available for Microsoft Defender for Office 365 – a Plan 1 and a Plan 2. Plan 2 includes all of the features in Plan 1 as well as additional features in the areas of automation, investigation, remediation, and education.

They’re not available as standalone licenses, only as an Add-on for users already licensed with any Microsoft 365, Office 365, Exchange Online, SharePoint Online, or OneDrive for Business plan license.

Alternatively, a Microsoft 365 Business Premium license includes Microsoft Defender for Office 365 Plan 1, and the following licenses include Microsoft Defender for Office 365 Plan 2:

  • Office 365 E5
  • Microsoft 365 E5
  • Microsoft 365 E5 Security Add-on

There are also Microsoft Defender for Office 365 F1 and F2 User SLs for users meeting the requirements of Frontline Workers, and already licensed with any Microsoft 365, Office 365, Exchange Online, SharePoint Online, or OneDrive for Business plan license. The following Frontline Worker licenses include Microsoft Defender for Office 365 Plan 2:

  • Microsoft 365 F5 Security Add-on
  • Microsoft 365 F5 Security + Compliance Add-on

Availability

The regular Microsoft Defender for Office 365 Plan 1 and Plan 2 licenses are widely available in the Volume Licensing agreements and CSP. The Frontline Worker User SLs show as only available through the EA in the Product Terms, but do appear on the CSP price list.