Microsoft Defender for Servers

Photo by Samuel Jeru00f3nimo on

Microsoft Defender for Servers is available as one of the workload components of Microsoft Defender for Cloud and is now split into Plan 1 and Plan 2.

Microsoft Defender for Servers Plan 1

The features contained in Plan 1 are:

  • Auto onboarding for resources in Azure, AWS, and GCP
  • Microsoft Threat & Vulnerability management
  • Use of Defender for Cloud or M365 Defender portal
  • Integration of Defender for Cloud and Defender for Endpoint

Microsoft Defender for Servers Plan 2

Additional capabilities in Plan 2 include:

  • Log Analytics – with 500MB free
  • Security policy & regulatory compliance
  • Vulnerability assessment
  • Threat detection
  • Just in Time VM access
  • File integrity monitoring
  • Adaptive network hardening


Under the Azure meter, the prices are listed here as:

  • Plan 1 = £0.006 per server per hour
  • Plan 2 = £0.016 per app service per hour

Volume Licensing

If you have 50 or more combined licenses of:

  • Microsoft Defender for Endpoint
  • Windows E5/A5
  • M365 E5/A5
  • M365 Security USLs

you can acquire Microsoft Defender for Endpoint (Server) under EA/EAS/MCA/EES agreements.

If you have these licenses and then choose to cover the same servers with Microsoft Defender for Cloud (the new name for Azure Security Center + Azure Defender), you will be eligible for a credit towards the cost of the latter.


Microsoft Docs page

2 Replies to “Microsoft Defender for Servers”

  1. Hi Rich, the requirement for buying the server license doesnt specify plan 1 or plan 2 of Microsoft Defender for Endpoint (USL). If the company has >50 M365 E3s (contains DFE Plan 1) , do they qualify to get the server license?. Thanks

Leave a Reply

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s

%d bloggers like this: