The list of which licences contains which defender plans is found on this page https://www.microsoft.com/en-gb/licensing/product-licensing/microsoft-365-enterprise?SilentAuth=1&wa=wsignin1.0&rtc=1&activetab=m365-enterprise%3aprimaryr5#primaryR3 with the PDF comparison sheet here

Answer from Alistair Ross on learn.microsoft.com
Discussions

Endpoint Security and XDR pricing for MSPs
Have a look at Heimdal (European vendor) and Huntress (minimum of 50 seats). Heimdal has an a la carte menu of modules you can pick and choose from and has a 24/7 SOC or MXDR service as they call it. More on reddit.com
🌐 r/msp
56
1
April 28, 2024
Pricing Guide for Microsoft Defender XDR and Updated M365 Comparison Chart
Hi Dan, first of all I would like to sincerely thank you for all the effort you've put into creating such an elaborate license comparison table. You have no idea how much this helps. However, it would be great if you could provide a legend. For example, on the Exchange Online portion, you've marked P1 & P2, but marked an X for Business Basic. What does the X mean? If I'm not mistaken, business basic provides an EXO Plan 1. Also, you've put Business Basic & Standard under Office 365, and only Business premium under Microsoft 365. I believe even business basic and standard are also Microsoft 365. Would be great if you can clarify More on reddit.com
🌐 r/Office365
6
48
January 4, 2021
Is Defender a good XDR ?
I have been working with the Defender suite since 2020 and Microsoft have put a lot of effort to make it one of the best XDR solutions out there with continuous improvements. I have not used other XDR solutions so I cannot compare it against other products. My only advise would be avoiding all these YouTube videos where they run multiple ransomware files against Defender, as neither the devices used in the test nor Defender have been hardened properly. More on reddit.com
🌐 r/DefenderATP
46
24
May 22, 2025
Defender XDR lab
If your company is an MS partner setup yourself your own lab use https://cdx.Microsoft.com for subscription with Security licenses and full of pretend test users all happily shaping Contoso files and email Activate free credit part of Visual Studio https://azure.microsoft.com/en-us/pricing/member-offers/credit-for-visual-studio-subscribers for Azure and Sentinel. The only gotcha is to transfer and link Azure subscription to CDX Entra ID and then detach after 90 days and transfer to the new CDX Entra ID More on reddit.com
🌐 r/DefenderATP
17
4
December 23, 2024
🌐
Infusedinnovations
infusedinnovations.com › blog › secure-intelligent-workplace › budgeting-for-microsoft-defender-xdr-and-zero-trust-security
Budgeting for Microsoft Defender XDR and Zero Trust Security
July 10, 2024 - Using the Security Orchestration Automation & Response (SOAR) and Automated Investigation & Response (AIR) tools inside of MD XDR, you can have an automated response triggered in seconds instead of hours. Most likely, you will choose around three personas listed on our Complete Microsoft 365 Licensing Comparison so that you don’t have to purchase Microsoft 365 E5 for everyone.
🌐
TrustRadius
trustradius.com › home › extended detection and response (xdr) platforms › microsoft defender xdr › pricing
Microsoft Defender XDR Pricing 2025
Cost-Efficiency: Microsoft Defender XDR often proves cost-effective compared to implementing multiple standalone … consolidating security functions into a single platform, potentially leading to cost efficiencies and optimized personnel utilization. ... come by default on every subscription, not an add on as it is vital tool Price is another point …
Rating: 8.7/10 ​ - ​ 173 votes
🌐
Microsoft
microsoft.com › en-us › security › business › siem-and-xdr › microsoft-defender-xdr
Microsoft Defender XDR | Microsoft Security
Protect your organization with Microsoft Defender XDR, a unified solution to detect and stop advanced cyberthreats.
🌐
Microsoft Learn
learn.microsoft.com › en-us › defender-xdr › prerequisites
Microsoft Defender XDR prerequisites - Microsoft Defender XDR | Microsoft Learn
April 3, 2025 - Learn about licensing and other requirements for provisioning and using Microsoft Defender XDR.
Find elsewhere
🌐
PCNation
pcnation.com › home › hardware › services › services & warranties › managed services (cloud) › security, email & web defense › defender experts xdr edu sub per user -student
Microsoft Defender Experts Xdr - Subscription - 1 User - 1 Month
DEFENDER EXPERTS XDR EDU SUB PER USER -STUDENT
Tech SpecsSpecificationsManufacturerMicrosoft CorporationManufacturer Part NumberSP100001Manufacturer Website Addresshttp://www.microsoft.comBrand NameMicrosoftProduct NameDefender Experts XdrProduct TypeSoftware LicensingProduct InformationSoftware NameDefender Experts XdrLanguage SupportedAll LanguagesLicense InformationLicense TypeSubscriptionLicense PricingEducationLicense Validation Period1 MonthLicense Quantity1 UserLicensing ProgramMicrosoft Volume Licensing Agreement (VLA)
Price   $84.37
Address   500 Central Avenue Northfield, 60093
🌐
Microsoft
microsoft.com › en-us › security › pricing-overview
Pricing for Security Software Solutions | Microsoft Security
Explore Microsoft Security solutions like Microsoft Purview and Microsoft Sentinel. Customize plans and pricing to find the best option for your data needs.
🌐
Mainstream-tech
mainstream-tech.com › pricelist
Product Price List
JavaScript is disabled in your browser · Please enable JavaScript to proceed · A required part of this site couldn’t load. This may be due to a browser extension, network issues, or browser settings. Please check your connection, disable any ad blockers, or try using a different browser
🌐
Microsoft Learn
learn.microsoft.com › en-us › azure › sentinel › microsoft-365-defender-sentinel-integration
Microsoft Defender XDR integration with Microsoft Sentinel | Microsoft Learn
October 27, 2025 - Integrating the services streams all Defender XDR incidents and advanced hunting events into Microsoft Sentinel, and keeps the incidents and events synchronized between the Azure and Microsoft Defender portals.
🌐
PeerSpot
peerspot.com › questions › what-is-your-experience-regarding-pricing-and-costs-for-microsoft-365-defender
What is your experience regarding pricing and costs for Microsoft 365 Defender?
The pricing for Microsoft Sentinel operates on a pay-as-you-go model based on data ingestion. I recall that Defender XDR pricing is based on the number of endpoints.
🌐
Microsoft
marketplace.microsoft.com › en-gb › marketplace › consulting-services › insight-5305567.managed_xdr
Insight Managed XDR for Microsoft
Managed XDR price per endpoint is dependent upon total quantities and log ingestion and will range from $25-$135/endpoint annually, excluding licensing fees and any needed Professional or Consulting Services.
🌐
Dev4Side
dev4side.com › en › blog › microsoft-defender-xdr
Microsoft Defender XDR: the suite to defend your digital assets
Microsoft Defender XDR is a unified business defense suite, both pre- and post-breach, that includes Defender for Cloud Apps, Defender for Endpoint, Defender for Identity, Defender for Office 365, Vulnerability Management, and Defender for Cloud. It serves to coordinate detection, prevention, investigation and response across endpoints, identities, emails and applications, offering integrated protection against the most sophisticated attacks.
🌐
GBHackers
gbhackers.com › home › microsoft adds new threat briefing agent inside defender portal
Microsoft Adds New Threat Briefing Agent Inside Defender Portal
November 19, 2025 - This integration provides world-class, real-time threat intelligence at no additional cost. Defender XDR customers gain access to Microsoft’s comprehensive threat intelligence library through enhanced threat reports within Threat Analytics.
🌐
Microsoft
microsoft.com › en-us › security › business › microsoft-entra-pricing
Microsoft Entra Plans and Pricing | Microsoft Security
Explore Microsoft Entra, offering a range of identity and network access management products. See which license, plan, and price work for your business.
🌐
IRONSCALES
ironscales.com › guides › microsoft-365-defender › microsoft-defender-licenses
Microsoft Defender Licenses
September 22, 2025 - Learn about Microsoft's advanced threat protection platform, Defender XDR, and its various components and licensing models to enhance your overall security
🌐
Microsoft
microsoft.com › en-us › security › pricing › small-medium-business
Microsoft 365 Security Pricing for Business | Microsoft Security
Explore pricing for Microsoft 365 Business Standard and Microsoft 365 Premium, and discover the cost of security plans for your small or medium-sized business.