The tables below display the online services or capabilites included in Microsoft Security suites for Enterprises, Frontline Workers, and Small and Medium Businesses. Each column represents a purchasable offer, each row represents an included online service or capability, and a check mark indicates that the service or capability is included in that offer.

Notes:
[1] Microsoft Defender Suite (previously Microsoft 365 E5 Security) requires Microsoft 365 E3, or Office 365 E3 and Enterprise Mobility + Security E3.
[2] Microsoft Purview Suite (previously Microsoft 365 E5 Compliance) requires Microsoft 365 E3, or Office 365 E3 and Enterprise Mobility + Security E3.
[3] Microsoft Intune Suite and Microsoft Intune Plan 2 do not include Microsoft Intune Plan 1 (formerly Microsoft Intune); Intune Plan 1, or a plan that includes it, is a prerequisite.
[4] Microsoft Entra Suite requires Microsoft Entra ID P1 (or P2).
[5] EMS suites also include Windows Server CAL rights.
[6] Microsoft Entra ID was formerly Azure Active Directory (Azure AD). Microsoft Entra ID P2 includes all P1 capabilities, plus Identity Protection (risk-based Conditional Access) and Privileged Identity Management.
[7] Microsoft Entra ID Protection is not available as a paid standalone offer; it is also included in Microsoft Entra ID P2.
[8] Face Check with Microsoft Entra Verified ID is consumption-based.
[9] Microsoft Defender for IoT – Enterprise IoT includes coverage for five devices per Microsoft 365 E5 / Microsoft Defender Suite license; additional device coverage is available on per device per month basis.
[10] Safe Documents and Application Guard for Office 365 are only provided via Microsoft 365 E5 or Microsoft Defender Suite.
[11] Azure Information Protection (AIP) P1 capabilities have migrated to Microsoft Purview Information Protection; AIP P1 is not available as a standalone for new customers as of January 2024.
[12] AIP P2 includes all P1 capabilities and is not available as a standalone for new customers.
 

Notes:
[1] Defender Suite FLW, Purview Suite FLW, and Defender + Purview Suite FLW require Microsoft 365 F1, Microsoft 365 F3, or Office 365 F3 and Enterprise Mobility + Security E3 (K).
[2] Microsoft Entra Suite FLW requires Microsoft Entra ID F2, or an eligible Frontline Worker license that includes the required Microsoft Entra ID entitlement.
[3] Microsoft Intune Suite FLW does not include Microsoft Intune Plan 1; Microsoft Intune Plan 1, or a Frontline Worker plan that includes it, is required.
 

Notes:
[1] These suites require Microsoft 365 Business Premium.
[2] Microsoft Defender for IoT – Enterprise IoT includes coverage for five devices per license; additional device coverage is available on a per device per month basis.