Trace Id is missing
Skip to main content
Microsoft Security

Microsoft Defender for Office 365

Help secure your email and Microsoft Teams with advanced protection against phishing, business email compromise, ransomware, and other cyberthreats.

Photograph of a person in a shared office space working at a desk with two large monitors displaying information

Integrated cyberthreat protection for your email and collaboration tools

Strengthen email security without compromise

Help protect your organization against advanced cyberattacks, such as BEC, with native email security that automatically stops cyberattack progression and boosts SecOps productivity.

Get comprehensive security for collaboration tools

Protect against emerging phishing attacks that target collaboration tools by protecting your Microsoft Teams environment with a unified detection and response experience.

Enhance security with industry-leading AI and automation

Get unparalleled accuracy with AI-enabled detection capabilities. Gain a better understanding of your organization's cyberthreat landscape and vulnerabilities with advanced analytics and automated workflows.

Protect against advanced cyberattacks with XDR

Respond to sophisticated cyberattacks using email and collaboration signals as part of your detection and response in Microsoft Defender XDR. Use incident-based detections to hunt across the entire cyberattack chain.

Capabilities

Screenshot of an admin portal containing various threat protection policies for configuration

Prevention

Help prevent a wide variety of volume-based and targeted cyberattacks, including business email compromise, credential phishing, ransomware, and advanced malware with a robust filtering stack.

Screenshot of a report in the protection portal showing a phishing campaign

Detection

Automatically detect malicious and suspicious content, such as links and files across email and Microsoft Teams, with industry-leading AI capabilities.

Screenshot of a report in the protection portal showing malware threats detected by the service, organized chronologically.

Investigation and hunting

Detect and respond to cyberattacks with a unified investigation experience, full cyberattack-chain visibility, and advanced hunting capabilities to identify and prioritize cyberthreats.

Close-up photograph of a laptop displaying an investigation graph with information about weaponized URLs in email.

Response and remediation

Respond to and remediate incidents with built-in automation that reverses malicious activities and custom setups that enable security teams to scale and be more efficient.

Screenshot of a report showing results from a phishing simulation campaign run in an organization.

Awareness and training

Run cyberattack simulations and train your users with data-driven insights on the most common cyberattacks and knowledge gaps specific to your organization.

Close-up photograph of a report in the protection portal showing existing policy configurations compared with recommended configurations.

Secure posture

Use recommended templates and configuration insights to help your organization get and stay secure.

Back to tabs

Unified security operations platform

Secure your digital estate with the only security operations (SecOps) platform that unifies the full capabilities of extended detection and response (XDR) and security information and event management (SIEM).

Animation of microsoft defender dashboard homepage

Unified portal

Detect and disrupt cyberthreats in near real time and streamline investigation and response.

Back to tabs

A holistic view of cyberthreat protection

Defender for Office 365 supports organizations throughout the lifecycle of a cyberattack.

An infographic of a secure enterprise

Industry recognition

Microsoft Security is a recognized industry leader.

The Forrester Wave™: Enterprise Email Security

Microsoft Defender for Office 365 is named a Leader in The Forrester Wave™: Enterprise Email Security, Q2 2023.1

Forrester logo

See how customers implement Defender for Office 365

St. Luke’s University Health Network

See why St Luke’s University Health Network moved from Proofpoint to Defender for Office 365.

bp

Read how bp is bolstering its resilience against phishing campaigns with Microsoft Defender for Office 365.

Compare flexible purchase options

Explore the comprehensive security capabilities offered by Microsoft Defender for Office 365 Plan 1 and Microsoft Defender for Office 365 Plan 2. These capabilities are also included in Microsoft 365 E5 Security.

Microsoft Defender for Office 365 (Plan 1)

Originally starting from USD$2.00 now starting from USD$2.00

USD$2.00 USD$2.00

user/month

Defender for Office 365 Plan 1 offers protection against advanced cyberattacks across email and collaboration tools in Office 365.

  • Protection against advanced cyberattacks, such as phishing, malware, spam, and business email compromise

  • Protection beyond email (Microsoft Teams, SharePoint, OneDrive, and Productivity apps)

  • Internal email protection

  • Detailed reporting

Microsoft Defender for Office 365 (Plan 2)

Originally starting from USD$5.00 now starting from USD$5.00

USD$5.00 USD$5.00

user/month

Defender for Office 365 Plan 2 offers everything in Plan 1 plus advanced cyberthreat hunting, automation, cyberattack simulation training, and cross-domain XDR capabilities.

  • Protection against advanced cyberattacks, such as phishing, malware, spam, and business email compromise

  • Protection beyond email (Microsoft Teams, SharePoint, OneDrive, and Productivity apps)

  • Internal email protection

  • Detailed reporting

  • Advanced cyberthreat hunting

  • Automated investigation and response

  • Cyberattack simulation training

  • Microsoft Defender XDR capabilities, such as cross-domain hunting and incident correlation

Related products

Use best-in-class Microsoft security products to prevent and detect cyberattacks across your Microsoft 365 workloads.

Two people in a meeting room where one person is holding up a laptop to show a coworker information being displayed on the screen.

Cyberattack Simulation Training

Automatically deploy a security awareness training program and measure behavioral changes.

A person using a mobile phone and laptop.

Microsoft Defender for Endpoint

Explore endpoint security for businesses with more than 300 users.

A person sitting at their desk using a laptop connected to two desktop monitors.

Microsoft Defender for Identity

Manage and secure hybrid identities and simplify employee, partner, and customer access.

A person sitting down and holding a mobile phone at eye-level while their laptop rests on the table in front of them.

Microsoft Defender for Cloud Apps

Get visibility, control data, and detect cyberthreats across cloud services and apps.

More about Defender for Office 365

Blog

Stay up to date

Get product news, configuration guidance, tips, and other information.

Datasheet

Help protect against QR code phishing

Proactively protect your organization—learn how Defender for Office 365 is responding to QR code phishing.

Documentation

Explore documentation

Review technical guidance for Defender for Office 365.

Training

Become an expert

Train to become an expert in Defender for Office 365, whether you’re a beginner or have experience.

Protect everything

Make your future more secure. Explore your security options today.

[1] The Forrester Wave™: Enterprise Email Security, Q2 2023. Jess Burn. June 12, 2023.

Follow Microsoft Security