Microsoft Defender for Office 365
Safeguard your email and collaboration tools from phishing, and disrupt advanced cyberthreats, such as business email compromise.
Build secure and stay secure with new innovations for devs
OVERVIEW
Holistic protection for your email and collaboration tools
- Email remains the number one entry point for cyberattacks. Help ensure that email-based cyberattacks—including phishing via malicious links or QR codes, business email compromise (BEC), and malware—don’t reach your users.
- Remote work has fostered the adoption of modern collaboration tools and opened new vulnerabilities for cybercriminals. Help ensure safe collaboration across Microsoft Teams, SharePoint, and OneDrive—with inline protection against malicious URLs, real-time detonation of attachments and links, and other features. Give your security team full visibility into cyberthreats with alerts and data across Microsoft collaboration tools.
- As adversaries improve their techniques through the use of AI, it’s critical that your defense does the same. Help protect your business from the most sophisticated cyberthreats. Microsoft uses language models with sentiment analysis to provide AI-powered email and collaboration security.
- On average, cyberattacks move laterally in 72 minutes, making manual responses insufficient. Use automated capabilities with extended detection and response (XDR) to disrupt in-progress attacks. XDR technology analyzes the attacker’s intent, identifies compromised assets, and contains cyberthreats in near-real time, minimizing the impact of attacks—such as business email compromise (BEC)—on your organization.
CAPABILITIES
Advanced protection for email and collaboration tools
AI-powered sentiment analysis
Help ensure effective filtering of malicious emails and messages with a comprehensive prevention stack, including generative AI-based analysis.
Inline user protection
Block and prevent malicious links and attachments directly in Outlook and Microsoft Teams with user awareness banners.
BEC attack disruption
Get AI-based containment of BEC attacks through automatic disabling of compromised users, isolation of compromised devices, and post-delivery removal of malicious emails.
Security posture optimization
Apply recommended security configurations to strengthen your organization’s resilience against email and collaboration-based threats.
Priority account support
Get heightened security and configuration for the most sensitive accounts in your organization.
Awareness and training
Strengthen your first line of defense by training employees with simulations and targeted education on the latest cybersecurity threats and best practices.
Investigation and hunting
Uncover and mitigate cyberthreats with a unified incident experience that offers complete visibility into the cyberattack lifecycle and empowers security operations (SecOps) to act decisively.
Automated response and remediation
Rapidly contain and reverse the effects of cyberattacks with automated response capabilities, which enable SecOps teams to operate at scale and with minimal need for manual intervention.
AI for BEC and scams
Enhance your email and collaboration security with built-in large language models (LLMs). Detect attacker intent with 99.99% accuracy, block malicious content in real time, empower security operations center (SOC) teams with insights, and stop evolving threats before they reach users.
Transparent reporting
Evaluate the performance of Microsoft Defender for Office 365
See how effectively Defender for Office 365 protects against email threats compared to other email security solutions. We believe in transparently sharing data about our performance so you can make informed security decisions, now with the latest Microsoft data from November 2025 through January 2026.
PRICING
Compare flexible purchase options
Explore the email and collaboration security capabilities in Defender for Office 365 Plan 1 and Plan 2. These capabilities are also included in Microsoft Defender Suite.
Microsoft Defender for Office 365 (Plan 1)
Defender for Office 365 Plan 1 offers protection against advanced cyberattacks across email and collaboration tools in Microsoft 365.
$2.00
user/month, paid yearly
Annual commitment
Defender for Office 365 Plan 1 offers protection against advanced cyberattacks across email and collaboration tools in Microsoft 365.
Annual commitment
This product is not available in your market.
-
- Protection against email and collaboration-based cyberattacks across email, Teams, SharePoint, and OneDrive
- Real-time protection for malicious links and QR codes
- Protection against zero-day malware and viruses in attachments
- Language model-based sentiment analysis to protect against phishing campaigns
- Protection for internal email
- Real-time reporting
Microsoft Defender for Office 365 (Plan 2)
Defender for Office 365 Plan 2 offers everything in Plan 1 plus advanced cyberthreat hunting, automation, cyberattack simulation training, and cross-domain XDR capabilities.
$5.00
user/month, paid yearly
Annual commitment
Defender for Office 365 Plan 2 offers everything in Plan 1 plus advanced cyberthreat hunting, automation, cyberattack simulation training, and cross-domain XDR capabilities.
Annual commitment
This product is not available in your market.
-
- Advanced protection for Teams
- Support to open documents in protected view for added cybersecurity
- Cyberattack simulation training
- Detailed reporting to identify and analyze recent cyberthreats
- Tracking of cyberthreat campaigns that might impact your organization
- Automated investigation and response
- XDR capabilities, such as cross-domain hunting and incident correlation
Related products
Get ahead of cyberthreat actors with security solutions that work together.
INDUSTRY RECOGNITION
Microsoft Security is a recognized industry leader
-
Gartner® Magic Quadrant™ for Email Security
Microsoft is named a Leader in the 2025 Gartner® Magic Quadrant™ for Email Security.1
Your guide to secure, seamless collaboration
Help ensure safe collaboration across Microsoft Teams, SharePoint, and OneDrive with real-time protection against malicious URLs, attachment detonation, and comprehensive cyberthreat visibility.
CUSTOMER STORIES
Explore how customers are benefiting from Defender for Office 365
RESOURCES
Learn more about Defender for Office 365
Protect everything
Make your future more secure. Explore your security options today.
- [1]Gartner, Magic Quadrant for Email Security, Max Taggett, Nikul Patel, 1 December 2025.
Gartner and Magic Quadrant are trademarks of Gartner, Inc. and/or its affiliates.
Gartner does not endorse any vendor, product or service depicted in its research publications, and does not advise technology users to select only those vendors with the highest ratings or other designation. Gartner research publications consist of the opinions of Gartner’s research organization and should not be construed as statements of fact. Gartner disclaims all warranties, expressed or implied, with respect to this research, including any warranties of merchantability or fitness for a particular purpose.
Follow Microsoft Security