Hi Dan, first of all I would like to sincerely thank you for all the effort you've put into creating such an elaborate license comparison table. You have no idea how much this helps. However, it would be great if you could provide a legend. For example, on the Exchange Online portion, you've marked P1 & P2, but marked an X for Business Basic. What does the X mean? If I'm not mistaken, business basic provides an EXO Plan 1. Also, you've put Business Basic & Standard under Office 365, and only Business premium under Microsoft 365. I believe even business basic and standard are also Microsoft 365. Would be great if you can clarify More on reddit.com

Microsoft Defender for Endpoint P1 $3 per user More on reddit.com

What exactly are you looking to do? Bus Prem is a great license for sub 300 user orgs and can still have all the telemetry and logs ingested into sentinel. From an MDE perspective the bus prem feature set actually sits in between MDE p1 and p2 with great value for money, I wouldn’t worry about upgrading until you’ve maximised the investment on your current license and have decided you want/need MDE p2. Same goes for MDO P2 unless you are going to use attack simulation training and activity explorer then you aren’t getting much more for your money. Pretty sure bus prem includes cloud app discovery so you could get that deployed and start gathering telemetry on shadow IT etc ready for when you need the full product. Entra ID p2 I kinda get as you Identity Protection which gives you risk based conditions for conditional access etc but again, I’d always recommend maximising your investment in the current license first. I typically see and would recommend clients going this way in your scenario Bus prem - maximise investment and familiarise yourself with the xdr solutions available Bus prem + Entra ID p2 - implement risk based CA policies Upgrade from bus prem to m365 e3 + e5 security add on - rollout all other xdr solutions and get a solid foundation in place Start to implement purview features like sensitivity labels, dlp etc if you need more then upgrade to m365 e5 Obviously you can mix the above order up a bit based on your priorities but that is the typical upgrade path I see More on reddit.com

If your company is an MS partner setup yourself your own lab use https://cdx.Microsoft.com for subscription with Security licenses and full of pretend test users all happily shaping Contoso files and email Activate free credit part of Visual Studio https://azure.microsoft.com/en-us/pricing/member-offers/credit-for-visual-studio-subscribers for Azure and Sentinel. The only gotcha is to transfer and link Azure subscription to CDX Entra ID and then detach after 90 days and transfer to the new CDX Entra ID More on reddit.com