Skip navigation

Microsoft Defender for Cloud pricing

Protect your multi-cloud and hybrid environments

Microsoft Defender for Cloud is a Cloud Security Posture Management and workload protection solution that finds weak spots across your cloud configuration, helps strengthen the overall security posture of your environment, and can protect workloads across multi-cloud and hybrid environments from evolving threats.

Explore pricing options

Apply filters to customise pricing options to your needs.

Prices are estimates only and are not intended as actual price quotes. Actual pricing may vary depending on the type of agreement entered with Microsoft, date of purchase, and the currency exchange rate. Prices are calculated based on US dollars and converted using Thomson Reuters benchmark rates refreshed on the first day of each calendar month. Sign in to the Azure pricing calculator to see pricing based on your current program/offer with Microsoft. Contact an Azure sales specialist for more information on pricing or to request a price quote. See frequently asked questions about Azure pricing.

Microsoft Defender for Cloud helps you protect resources across Azure, other clouds, and on-premises through its Free tier and enhanced security capabilities. The Microsoft Defender for Cloud Free Tier includes continuous assessment and security recommendations, as well as Secure Score for Azure and AWS environments.

When you enable Microsoft Defender for Cloud, we automatically enrol and start protecting all your resources unless you explicitly decide to opt-out. For any resource that is protected by Defender for Cloud, you will be charged per the pricing model below.

Microsoft Defender for Cloud is free for the first 30 days. Any usage beyond 30 days will be automatically charged as per the pricing scheme below.

Resource Type Price
Microsoft Defender for Servers $-
Included data - 500 MB/day
Microsoft Defender for App Service $-
Microsoft Defender for SQL on Azure $-2
Microsoft Defender for SQL outside Azure $-3
Microsoft Defender for MySQL $-/Instance/month
Microsoft Defender for PostgreSQL $-/Instance/month
Microsoft Defender for MariaDB $-
Microsoft Defender for Storage1 $-/10K transactions
Microsoft Defender for Kubernetes $-/vCore/hour
Microsoft Defender for ACR $-/image
Microsoft Defender for Containers $-/vCore/month 4 5
Microsoft Defender for Key Vault $-/10K transactions
Microsoft Defender for ARM $-/1M API calls
Microsoft Defender for DNS $-/1M Queries

1 Microsoft Defender currently protects Azure Blobs, Azure Files and Azure Data Lake Storage Gen2 resources.

2 Microsoft Defender for SQL on Azure price applies to SQL servers on Azure SQL Database, Azure SQL Managed Instance and Azure Virtual Machines.

3 Microsoft Defender for SQL outside Azure price applies on Azure Arc enabled SQL Servers, which extends Azure services to SQL Server instances hosted outside of Azure in the customer’s datacentre, on the edge or in a multi-cloud environment.

4 This price includes 20 free scans per vCore, whereby the count will be based on the previous month's consumption. Every subsequent scan will be charged at $- per image digest. The majority of customers are not expected to incur any additional image scan charges.

5 Microsoft Defender for Containers is free of charge during the month of December 2021. You will be charged for this service starting on January 1, 2022.

Additional data charges for virtual machines only

Overage Metre Price
Additional data uploaded over included daily data See Azure Monitor pricing page for data ingestion pricing
Additional retention beyond one month See Azure Monitor pricing page for data retention pricing

Microsoft Defender for IoT (formerly Azure Defender for IoT)

Defender for IoT delivers unified security for IoT/OT environments, offering two different sets of capabilities depending on whether you need to protect existing IoT/OT environments or are securing new IoT/OT devices that are provisioned and managed through IoT Hub.

Agentless monitoring

Defender for IoT's agentless monitoring capabilities protect existing enterprise IoT/OT environments, providing automatic asset discovery, vulnerability management, and threat detection. Today, Defender for IoT's agentless monitoring capabilities are available for on-premises deployment, with the option to connect to the cloud to send threat information to Microsoft Sentinel.

Defender for IoT's agentless monitoring capabilities are free of charge for the first 1,000 committed devices for the first 30 days. Beyond that, customers will automatically be charged per the pricing below. There is no cost for ingesting Defender for IoT alerts and incidents into Microsoft Sentinel.

Solution Price
Defender for IoT agentless monitoring - on-premises $-/month per 100 monitored devices, based on commitment1
$-/per 100 devices per 1-year commitment

1If a customer chooses to connect to the cloud to send data to Microsoft Sentinel, they will need to connect the Defender for IoT sensor to an IoT Hub, which has an additional cost. For pricing, visit the Azure IoT Hub pricing page.

Security for new devices provisioned through IoT Hub

Defender for IoT also offers security for new devices provisioned and managed through IoT Hub, such as those that have the Defender for IoT security agent installed. These security capabilities are free of charge for the first 30 days. Any usage beyond 30 days will be automatically charged per the pricing below.

Solution Price
Defender for IoT for devices managed by IoT Hub – by device $-/month
Defender for IoT for devices managed by IoT Hub – by messages $-/25K transactions

Azure pricing and purchasing options

Connect with us directly

Get a walkthrough of Azure pricing. Understand pricing for your cloud solution, learn about cost optimisation and request a custom proposal.

Talk to a sales specialist

See ways to purchase

Purchase Azure services through the Azure website, a Microsoft representative or an Azure partner.

Explore your options

Additional resources

Microsoft Defender for Cloud details

Learn more about Microsoft Defender for Cloud features and capabilities.

Pricing calculator

Estimate your expected monthly costs for using any combination of Azure products.

SLA

Review the service-level agreement for this product.

Documentation

Review technical tutorials, videos and more Microsoft Defender for Cloud resources.

  • A transaction is an API call with a request payload size of up to 1,000 data points included in the time series. Each increment of 1,000 data points will be counted as an additional transaction. For example, an API call with request payload size of 2,050 data points is 3 transactions. The maximum request payload size is 8,640 data points. Each data point in the time series is a time stamp/numerical value pair.

Talk to a sales specialist for a walk-through of Azure pricing. Understand pricing for your cloud solution.

Get free cloud services and $200 in credit to explore Azure for 30 days.

Added to estimate. Press 'v' to view on calculator
Can we help you?