
Microsoft Defender for Servers is available as one of the workload components of Microsoft Defender for Cloud and is now split into Plan 1 and Plan 2.
Microsoft Defender for Servers Plan 1
The features contained in Plan 1 are:
- Auto onboarding for resources in Azure, AWS, and GCP
- Microsoft Threat & Vulnerability management
- Use of Defender for Cloud or M365 Defender portal
- Integration of Defender for Cloud and Defender for Endpoint
Microsoft Defender for Servers Plan 2
Additional capabilities in Plan 2 include:
- Log Analytics – with 500MB free
- Security policy & regulatory compliance
- Vulnerability assessment
- Threat detection
- Just in Time VM access
- File integrity monitoring
- Adaptive network hardening

Pricing
Under the Azure meter, the prices are listed here as:
- Plan 1 = £0.006 per server per hour
- Plan 2 = £0.016 per app service per hour
Volume Licensing
If you have 50 or more combined licenses of:
- Microsoft Defender for Endpoint
- Windows E5/A5
- M365 E5/A5
- M365 Security USLs
you can acquire Microsoft Defender for Endpoint (Server) under EA/EAS/MCA/EES agreements.
If you have these licenses and then choose to cover the same servers with Microsoft Defender for Cloud (the new name for Azure Security Center + Azure Defender), you will be eligible for a credit towards the cost of the latter.
Resources
Hi Rich, the requirement for buying the server license doesnt specify plan 1 or plan 2 of Microsoft Defender for Endpoint (USL). If the company has >50 M365 E3s (contains DFE Plan 1) , do they qualify to get the server license?. Thanks
Hi Aileen,
Microsoft’s Product Terms state that M365 E5 qualify, but not E3.
https://www.microsoft.com/licensing/terms/productoffering/MicrosoftDefenderforEndpointServer/EAEAS
https://www.microsoft.com/licensing/terms/productoffering/MicrosoftDefenderforEndpointServer/MCA