This is the Trace Id: b05ea41248aadb7fb5880022cb313df0
Skip to main content
Microsoft Security

Microsoft Security pricing

Get end-to-end protection with plans and products for security.

Enterprise plans

Get AI-powered, end-to-end security, compliance, and analytical capabilities with a Microsoft 365 enterprise plan. Select the plan that best meets your security needs.
Back to tabs

Compare enterprise plans

Compare plans

Microsoft 365 E3 EEA (no Teams)

€29.70
user/month
(Annual commitment)
Price does not include VAT.
Prices may vary based on your Microsoft agreement. Contact Sales for a customized quote.

Microsoft 365 E5 EEA (no Teams)

€51.70
user/month
(Annual commitment)
Price does not include VAT.
Prices may vary based on your Microsoft agreement. Contact Sales for a customized quote.

Extended detection and response (XDR)

Email and collaboration security including enhanced phishing protection

Antivirus and antimalware

Full endpoint security including endpoint detection and response, and ransomware protection

Full SaaS security including malicious OAuth app protection

Shadow IT discovery capabilities

Hybrid identity protection (ITDR)

Multi Factor Authentication

Single-sign-on (SSO)

Windows Hello for Business

Role-based access control (RBAC)

Cross-tenant user synchronization, multitenant organizations

Global password protection and management

Conditional Access

Session lifetime management

SharePoint limited access

Application launch portal and user application collections in My Apps

Employee self-service: password change, reset, and unlock; sign-in activity search and reporting

Advanced security and usage reports

Risk-based Conditional Access

Authentication context (step-up authentication)

Device and application filters for Conditional Access

Real-time dynamic sign-in assessment

Real-time dynamic user sign-in assessment

Token protection

Vulnerabilities and risky account detection

Risk event investigation

Automated user provisioning to SaaS apps

Automated user provisioning to on-premises apps

Automated group provisioning to apps

HR-driven provisioning

Terms of use attestation

Access certification and reviews

Entitlement management

Privileged identity management

Verifiable credentials issuance

Verifiable credentials verification

Flexible deployment options

Universal tenant restrictions

Source IP restoration and compliant network controls

Prevent loss of sensitive data across apps, browsers, on-premises file shares, and other endpoints.

Identify, classify, and protect critical sensitive data; then manage and secure it across your environment.

Detect, investigate, and address potential insider risks, such as data theft or data leaks.

Respond to security events, forensic or internal investigations, and compliance needs with critical audit log records.

Discover and manage data and content to support legal matters or internal investigations.

Foster a safe and compliant workplace by detecting sensitive or inappropriate content in your organization’s systems.

Classify and govern data at scale to meet your legal, business, privacy, and regulatory content obligations.

Streamline multicloud and regulatory compliance with templates, step-by-step guidance, and insights.

Manage the lifecycle of records while meeting legal, business, privacy, and regulatory requirements

Cross-platform device management

Virtual and physical device management, company owned and personal (BYO) devices

Endpoint security policy management and baselines

Device compliance policies and conditional access enforcement

Application and operating systems management

Application protection policies and device configuration

Endpoint analytics

Download the comparison table

Review all Microsoft 365, Office 365, Microsoft Enterprise Mobility + Security, and Windows 11 subscription options.
Customize your plan

Add capabilities for security, compliance, and identity management.

Total Economic Impact™ studies

Deliver a best-in-class, end-to-end solution for cost-effective security. Read these Forrester TEI studies to learn more.

The Total Economic Impact™ of deploying Microsoft Defender

Forrester TEI of Microsoft 365 E5 Compliance (Microsoft Purview Suite)

Forrester TEI of Microsoft Entra

Forrester TEI of Microsoft Intune

Forrester TEI of Microsoft Sentinel

Resources

Get started with training, resources, and community

A person using a tablet.
Microsoft Security enablement

Get more from your security investment by reading the adoption guide

Access interactive guides and resources that will help you learn about protecting your assets.
A group of people sitting at a table.
Security Hub

Explore the Security Hub on Microsoft Learn

Get resources for planning and implementing security strategy, architecture, processes, and technology.
A women showing laptop screen to a man.
Get started

Protect everything 

Make your future more secure. Explore your security options today.

Frequently asked questions

  • The Microsoft 365 E3 plan provides cost efficiency with modular add-on options. It provides a strong foundation—including Office apps, email, OneDrive, Teams, and core security features like Microsoft Entra ID P1 and Microsoft Defender Antivirus—at a lower price point. You can then selectively add advanced capabilities, such as Microsoft Defender Suite, Microsoft Purview Suite, Microsoft Intune Suite, or Microsoft Entra Suite, based on your specific needs.
  • Choosing Microsoft 365 E5 over Microsoft 365 E3 offers a significant boost in security, compliance, analytics, and communication capabilities—making it the most comprehensive solution for organizations seeking enterprise-grade protection, operational efficiency, and AI readiness. Microsoft 365 E5 offers four key advantages over E3. First, it delivers comprehensive security and compliance capabilities throughout the Microsoft Defender, Microsoft Purview, and Microsoft Entra suites—making it ideal for organizations with complex regulatory or risk management needs. Second, it includes advanced analytics and automation tools like Microsoft 365 Defender, Power BI Pro, and Microsoft Sentinel integration, enabling faster incident response and deeper insights. Third, Microsoft 365 E5 enhances communication with Teams Phone and Audio Conferencing, supporting enterprise-grade collaboration. Finally, it consolidates multiple premium features into a single license, simplifying procurement and positioning organizations for AI-readiness with built-in support for Microsoft 365.
  • Microsoft Defender for Endpoint licenses include protection for up to 5 devices per user license. This does not include servers, which must be licensed separately.
  • Microsoft 365 E3 and E5 licenses include management and protection for up to 15 devices enrolled in Microsoft Intune.
  • Microsoft Defender for Office 365 provides comprehensive protection against email-based threats, as well as security for your collaboration tools including Microsoft Teams, SharePoint, and OneDrive.
  • Organizations need to buy enough licenses for the number of users that require protection. For example, if you are looking to apply data security and compliance to Microsoft 365 or Microsoft 365 Copilot usage, you need one license for each of those users.
  • Microsoft 365 E3 provides core data security and compliance value (Purview Data Loss Prevention for Exchange Online, SharePoint Online & OneDrive for Business, Purview Information Protection, Purview Audit, Purview eDiscovery, Purview Data Lifecycle Management, and Purview Compliance Manager).

    Microsoft Purview Suite (previously Microsoft 365 E5 Compliance) adds advanced data security and compliance value (all of the above capabilities plus Purview Insider Risk Management, Purview Communication Compliance, and Purview Records Management).
  • In Microsoft 365 E3, you can have basic data security and compliance such as setting Purview Data Loss Prevention policies to prevent unauthorized use. In Microsoft Purview Suite (previously Microsoft 365 E5 Compliance), you can use advanced data security and compliance, such as getting alerted to risky Copilot use with Purview Communication Compliance and detecting a sequence of risky user actions with Purview Insider Risk Management.

    Microsoft Purview Suite (previously Microsoft 365 E5 Compliance) prepares you to protect your Microsoft 365 Copilot data from accidental oversharing, data leaks, or non-compliance usage all while driving adherence to common industry and regional regulations.
  • For data security and compliance value closely tied to user-based protections with Microsoft Purview, get started with Microsoft Purview Suite (previously Microsoft 365 E5 Compliance). And, for data security, governance, and compliance value across data estates, analytics, and AI apps, get started with pay-as-you-go pricing for Microsoft Purview.
  • The Microsoft Entra Suite is the only solution to deliver unified Zero Trust user access, enabling your employees to securely access any cloud and on-premises application with least privilege access, across public and private networks inside and outside your corporate perimeter. With a unique combination of deeply integrated Secure Access Service Edge (SASE), identity governance, identity protection and verification products, the Microsoft Entra Suite helps security teams accelerate their Zero Trust security strategy by unifying identity and network access controls.
  • Microsoft Entra Suite requires Microsoft Entra ID P1 or a plan that includes Microsoft Entra ID P1.
  • Special pricing is available for Microsoft Entra ID P2 and Microsoft 365 E5 customers. Contact your Microsoft representative for more details.
  • Microsoft 365 E3 includes Microsoft Entra ID P1, which provides core identity and access management capabilities such as single sign-on, multifactor authentication, Conditional Access, and more.

    Microsoft 365 E5 includes Microsoft Entra ID P2, which offers comprehensive identity protection and risk detection, adaptive risk-based access controls, and privileged access for critical resources.
  • Microsoft Intune empowers organizations to take a Zero Trust approach to endpoint security, protecting corporate data across all devices while reducing costs. The Intune Suite brings together advanced solutions to provide secure remote assistance, least privilege user access controls, cloud-based certificate management, AI-based advanced analytics, simplified app deployment and patching, secure VPN access for personal mobile devices, over-the-air mobile firmware updates, and specialty device management and protection into a single, unified plan.
  • Each of the solutions in the Intune Suite can be purchased with separate add-on licenses. However, Microsoft Tunnel for Mobile Application Management, specialty device management, and firmware over-the-air updates are licensed together with Microsoft Intune Plan 2. Most organizations choose the Intune Suite over individual add-on options when they are ready to deploy 2–3 of the solutions such as Microsoft Intune Remote Help, Endpoint Privilege Management and Enterprise Application Management.
  • The Intune Suite is the all-encompassing add-on that brings together Remote Help, Endpoint Privilege Management, Advanced Analytics, Enterprise Application Management, Microsoft Cloud PKI and the capabilities of Intune Plan 2 in one comprehensive plan.

    Intune plan 2 offers Microsoft Tunnel for Mobile Application Management, specialty device management and firmware over-the-air updates.

    The Intune Suite and Intune Plan 2 add-ons both require Intune Plan 1 or a plan that includes Intune Plan 1 such as Microsoft 365 E3, Microsoft 365 E5 and Microsoft Business Premium.
  1. Note:
    For more detailed information about licensing terms and conditions, please refer to Microsoft Product Terms.
  2. [1]
    Availability of mobile apps varies by country/region.

Follow Microsoft Security