Microsoft Defender ATP Standalone is Now Available!

Product is now named: Microsoft Defender for Endpoint.

Only two years overdue, Microsoft Defender ATP standalone is now available! Since announcing Microsoft Defender Advanced Threat Protection for MacOS and Linux last year, Microsoft was still requiring customers to purchase a Windows 10 E5 license if they wanted access to MD ATP. But that is changing this month, now that a standalone MDATP SKU has been made available! If you would like to purchase Microsoft Defender ATP, you’ll have to go through a CSP or EA provider, as it’s not available in the retail portal. Infused Innovations is a Microsoft Gold Partner and CSP reseller, so contact us for a quote if you’re interested.

How Much Does Microsoft Defender ATP Cost?

The new Microsoft Defender ATP standalone retail cost via CSP is $5.20/mo per user for up to 5 machines. There is also a separate server SKU for MD ATP, which costs the same amount but is limited to a single server. However, the MDATP Server license is only available if you purchase a combined minimum of 50 seats for any of the following: Windows 10 E5 / Microsoft 365 E5 / Microsoft 365 E5 Security.

Microsoft Defender ATP does not currently have non-profit licensing. However, Windows 10 E5 for non-profits is only $3.30/mo. This is still a great deal, since it includes all of the Virtualization-Based Security that is only available in the Enterprise edition of Windows.

Academic pricing for MD ATP comes in at $2.50/user. Another great win for schools! The MD ATP Server plan is currently unavailable for EDU customers, but should be ready before the new school year starts this fall.

This pricing is great news, because Windows 10 E5 retails at $11/user/mo. As for servers, your only previous option was an Azure Security Center license, which is roughly $15/server/mo. The new standalone pricing makes the offering significantly more competitive with other next-gen antivirus offerings on the market, such as SentinelOne, CrowdStrike, or Sohpos Intercept X.

How Does Microsoft Defender ATP Rank Against Competitors?

Screenshot of the Gartner Magic Quadrants highlighting Microsoft Defender ATP standalone, Cloud App Security, Intune, and Azure Information Protection.

Gartner consistently ranks Microsoft in the Leader quadrant on their Magic Quadrant reports, and Microsoft Defender ATP is part of the reason for that.

Windows Defender Antivirus, the underlying AV engine for MD ATP, achieves top scores on numerous tests.

  • The AV-TEST Product Review and Certification Report: Windows Defender Antivirus consistently scores 6.0/6.0 in the AV-TEST, detecting 100% of malware samples.
  • Business Security Test: It’s gotten a rating of 99.9% in the 2019 Business Security Test reports, which mimic real-world malware attacks and test for performance.
  • SE Labs: These tests look at the protection capabilities of several solutions such as endpoint software, network appliances, and cloud services. Windows Defender Antivirus has consistently achieved an AAA award here.

MITRE’s evaluation based on the ATT&CK framework also found Microsoft Defender ATP to deliver “comprehensive coverage of attacker techniques across the entire attack chain.” Checkout the following video for an overview of the MD ATP feature set.

What are the System Requirements for Microsoft Defender ATP?

Microsoft Defender ATP will run on the following Windows platforms:

  • Windows 7 SP1 Enterprise
  • Windows 7 SP1 Pro
  • Windows 8.1 Enterprise
  • Windows 8.1 Pro
  • Windows 10, version 1607 or later
  • Windows 10 Enterprise
  • Windows 10 Education
  • Windows 10 Pro
  • Windows Server 2008 R2 SP1
  • Windows Server 2012 R2
  • Windows Server 2016
  • Windows Server 2016, version 1803
  • Windows Server 2019

Unfortunately, machines running mobile versions of Windows aren’t supported. But these other operating systems are:

  • MacOS – The three most recent builds. Currently 10.13+ as of March 2020.
  • Linux
    • Red Hat Enterprise Linux (RHEL) 7+
    • CentOS Linux 7+
    • Ubuntu 16.04 LTS +
    • SUSE Linux Enterprise Server (SLES) 12+
    • Debian 9+
    • Oracle Enterprise Linux 7
  • Android

And since the Microsoft Defender ATP management portal is accessed through a browser, these are the browsers that are supported:

  • Microsoft Edge
  • Internet Explorer version 11
  • Google Chrome

Is Microsoft Defender ATP Available for GCC High Customers?

Microsoft Defender ATP is available for US Government Community Cloud High (GCC High) customers, built into the US Azure Government environment. But some of the capabilities are more limited for US GCC High customers, compared to the commercial offering of it. Threat and Vulnerability Management as well as Microsoft Threat Experts are not currently available for US GCC High.

Some further components and integrations with other Microsoft products are also lacking as of yet. For a full list, see Microsoft’s page on MD ATP for US GCC High. Their goal is to eventually deliver all commercial features to this government offering as well—they’re just not quite there yet. Typically commercial feature releases take about 6-12 months before they appear in GCC tenants. Additionally, the Microsoft Defender ATP standalone version is not available for US GCC High yet.

How can I buy Microsoft Defender ATP Standalone?

Infused Innovations is a Microsoft Gold Partner and a Microsoft CSP provider. Just submit the Contact form at the bottom of the page for your free quote. Microsoft Defender ATP is only available through Microsoft CSP or an EA. All pricing in this post refers to retail CSP pricing.

Free Office 365 E1 Trial for 6 Months!

Microsoft is also announcing a free 6-month trial for Office 365 E1 due to the COVID-19 outbreak, recognizing the need for more employees to work from home. (This free trial is not available for GCC, GCC High, DoD, or EDU customers. As with MD ATP, Microsoft is working on a GCC version of the E1 Trial, which should be available soon.)

To learn more about the threats Defender ATP can protect you from, read our blog post about the continued problem of ransomware, or take a look at what our youngest interns are learning. Also: Defender is now available for mobile endpoints!

33 thoughts on “Microsoft Defender ATP Standalone is Now Available!

  1. Matthew Stewart

    I work for a university (Kent State) that plans to deploy Microsoft Defender Advanced Threat Protection on university issued computers, but faculty are working from home–many of us on our own machines. Is Defender Advanced Threat Protection available to individual private Microsoft customers?

    1. Dan Chemistruck

      One MD ATP user license allows you to activate on up to 5 devices. The caveat is that the device needs to be Hybrid AADJ or AADJ for it to activate. So for personal devices, most folks won’t want to register their computer with the organization.

  2. G

    If I am licensing a hyperv host and guests, do I need a license for each host and guest separately? Or does it follow the windows server pack model?

    1. Dan Chemistruck

      Forgive me, I am not as familiar with on-premises licensing as I am with cloud licensing. Each Windows Standard license allows you to license a single Hyper-V host (no other roles) and two guests. Enterprise licensing allows for unlimited guests. Hope that helps.

  3. Samantha Hattingh

    Hi Dan, great article thank you. Is there a minimum requirement for the Microsoft Defender ATP standalone sku such as Win E3 or can I add it to any licensed Windows OS (barring it meets the system requirements)? Just worried there is an underlying L+SA or some silly requirement?

    1. Dan Chemistruck

      Hi Samantha! The minimum requirement for MD ATP is Windows 10 Pro. This is because the machine must be AADJ or Hybrid AADJ to apply the MD ATP license. For server licensing, you’re supposed to have a minimum of 50 client licenses. :/

      1. Samantha Hattingh

        Thanks for the speedy response Dan! Just to make 100% sure, if I have M365 E3, I can add the standalone MD ATP SKU then? For the Server Licensing, a combination of one of M365 E5 or Win E5 has to be bundled with the MD ATP for server SKU if I read correctly above?

  4. jimmy

    Hi Dan,

    Nice post!

    Is it possible to combine MS 365 Business premium with standalone MDATP licenses?
    It would be a great combo since the E5 license are little bit a overkill for small to medium businesses with 10-100 employees.

    Looking forward to your reply.

    Kind regards,


  5. Jim HIll

    I have spent many hours working with Microsoft Support on this. They are still unable to provide a means for me to purchase the stand alone license. They said, “You must but it through a partner.” Then the said I could just by the E5 Security add-on for $12 a month. They were also unable to answer how to license it on Server 2019 running either locally or on AWS. These are still unanswered questions, and from what I read online many others have the same issues.

    1. Dan Chemistruck

      Hi Jim, yes you can only purchase Defender ATP from a partner or via an EA. We are a Microsoft CSP reseller and can assist you with purchasing MD ATP licenses for users and servers.

      Microsoft Support has not been trained on this new SKU yet and often confuses it with Microsoft 365 E5 Security. Please reach out to [email protected] if you’d like a quote. (It’s $5.20/um.)

  6. Shawn Gilbertson

    Do you know if this requires any prior SKU for Microsoft 365 or will this work for Volume Licensed workstations. Having a back and forth discussion with Microsoft and they state that you have to have Microsoft 365 E3 for this specific SKU to work.

    1. Dan Chemistruck

      Submit a contact form below if you’d like to purchase from us–we’re a Microsoft CSP reseller and can compete with EA pricing. You don’t need any other cloud licensing for Defender ATP to work if your devices are Hybrid Azure AD joined. If your machines are not Hybrid AADJ, then you’ll need an Intune license.

      The Microsoft 365 E3 requirement is for the Microsoft 365 E5 Security add-on, not the Defender ATP license.

  7. Guus van Berge

    Hi Dan!

    Thanks again for great article!

    Would you recommend Defender ATP for small businesses (anywhere between 10 and 50 users) who now have M365 BP and just use the standard defender as AV? I guess with this SKU third party AV’s will become absolute for a lot of cases. But where would you draw the line in advising this solution?

    1. Dan Chemistruck

      Hi Guus, I would recommend Defender ATP for anyone that is managing their work machine with Intune. IMO, it’s the best next-gen anti-virus on the market and provides advanced integration with Microsoft Cloud App Security and Azure ATP if you’re using it. If you’re using M365 BP, I would absolutely suggest getting MD ATP as an add-on and eliminating any third-party AV products.

      I will also say that the basic Windows Defender is quite good too. It just doesn’t have the central management or defenses for advanced persistent threats & fileless attacks.

  8. Danilo Divina

    Hi Dan,

    We are looking for an Endpoint security tool and we are considering Microsoft since we are currently utilizing Business Standard and Basic licenses. Can we combine MD ATP to Business Standard or Basic? Or do we need to upgrade to Business Premium first?

    1. Dan Chemistruck

      If your devices are Hybrid Azure AD Joined, there are no other licensing requirements to use MD ATP. If your devices are in a workgroup, you’ll need Windows 10 Pro and an Intune license. Intune is bundled with M365 BP/F3/E3/E5. Your O365 licensing doesn’t have any impact on MD ATP licensing.

Leave a Reply

Your email address will not be published. Required fields are marked *