What each component adds on top of Business Premium
| Component | In Business Premium | What it adds |
|---|---|---|
| Microsoft Entra ID P2 | Entra ID P1: Conditional Access and MFA | Entra ID Protection (user- and sign-in-risk policies) and Entra ID Governance |
| Defender for Identity | Not included | Detects identity attacks, including on on-premises Active Directory |
| Defender for Endpoint P2 | Defender for Business, with EDR | Threat hunting, live response, six months of data retention, and IoT device security |
| Defender for Office 365 P2 | Plan 1: Safe Links, Safe Attachments, anti-phishing | Automated investigation and response, attack simulation training, Threat Explorer and email hunting |
| Defender for Cloud Apps | Not included | Finds shadow IT and controls the cloud apps employees use |
Who it’s for
- Organizations with on-premises Active Directory. Defender for Identity detects attacks on AD, and Business Premium has nothing like it.
- Organizations building security awareness. Attack simulation training in Defender for Office 365 P2 lets you test and train employees regularly.
- Organizations that want risk-based response. Entra ID Protection can block a risky sign-in or force a password change when an account looks compromised.
- Organizations with a team or provider doing monitoring. Hunting and investigation tools are worth a lot only if someone uses them.
Who it’s too early for
If Business Premium isn’t fully deployed yet, for example Conditional Access, Intune and Defender for Business aren’t configured, start there. Most attacks are stopped at that layer, and Defender Suite won’t make up for a missing baseline.
What it costs
Prices vary by provider and terms, so get a current quote. The add-on is also available for Business Premium for nonprofits. There is also a version that combines Defender and Purview: Microsoft Defender and Purview Suites for Business Premium.
Where to start
- Make sure the Business Premium baseline is in place: Conditional Access, Intune and Defender for Business.
- Decide what you need: on-premises AD, phishing simulations, risk-based policies or cloud app control.
- Plan who will use the tools: an internal team or a monitoring provider.
- Get a quote and compare it with the separate tools you already pay for.
At OnCloud we help you check whether Defender Suite fits, and deploy it on top of Business Premium. Want to check?
Contact us