Azure Defender pricing

Protect your hybrid cloud workloads with Azure Defender

Start your Azure free account and get a $200 credit for 30 days, plus get 12 months of free access to Azure Defender.

Azure Defender, provides Extended Detection and Response for workloads running in Azure, on-premises, and in other clouds. Integrated with Security Center, Azure Defender protects your hybrid data, cloud native services and servers from threats; and integrates with your existing security workflows like your SIEM solution and Microsoft’s vast threat intelligence to streamline threat mitigation.

Pricing details

When you enable Azure Defender, we automatically enroll and start protecting all your resources unless you explicitly decide to opt-out. For any resource that is protected by Azure Defender, you will be charged per the pricing model below.

Azure Defender is free for the first 30 days. Any usage beyond 30 days will be automatically charged as per the pricing scheme below.

Features Azure Security Center Free Tier Azure Defender
Continuous assessment and security recommendations Available Available
Azure secure score Available Available
Just in time VM Access ‐ ‐ Not available Available
Adaptive application controls and network hardening ‐ ‐ Not available Available
Regulatory compliance dashboard and reports ‐ ‐ Not available Available
Threat protection for Azure VMs and non-Azure servers (including Server EDR) ‐ ‐ Not available Available
Threat protection for PaaS services ‐ ‐ Not available Available
Microsoft Defender for Endpoint (servers) ‐ ‐ Not available Available


Resource Type Price
Azure Defender for Servers $-
Included data - 500 MB/day
Azure Defender for App Service $-
Azure Defender for SQL $-
Azure Defender for MySQL (Preview) Free1
Azure Defender for PostgreSQL (Preview) Free1
Azure Defender for Storage - Protect all storage accounts within a subscription2 $-/10K transactions
Azure Defender for IoT - Devices discovered by Azure Defender for IoT sensor (Preview)3 Free1
Azure Defender for IoT - Devices managed by Azure IoT Hub - per device $-/month
Azure Defender for IoT - Devices managed by Azure IoT Hub - by messages $-/25K transactions
Azure Defender for Kubernetes $-/vCore/hour
Azure Defender for ACR $-/image
Azure Defender for Key Vault $-/10K transactions

1 Pricing displayed is preview price. Price will change at GA. For details on ASC features by resource, please refer to the resource specific documentation.

2 Azure Security Center currently protects Azure Blobs, Azure Files and Azure Data Lake Storage Gen2.

3 These new agentless monitoring capabilities for Azure Defender for IoT are integrated from the recent CyberX acquisition and are currently in public preview. These capabilities are free for the duration of the preview.

Additional data charges for virtual machines only

Overage Meter Price
Additional data uploaded over included daily data See Azure Monitor pricing page for data ingestion pricing
Additional retention beyond one month See Azure Monitor pricing page for data retention pricing

Support & SLA

  • Free billing and subscription management support.
  • Need tech support for preview services? Use our forums.
  • To learn more about the SLA, please visit the SLA page.


  • A transaction is an API call with a request payload size of up to 1,000 data points included in the time series. Each increment of 1,000 data points will be counted as an additional transaction. For example, an API call with request payload size of 2,050 data points is 3 transactions. The maximum request payload size is 8,640 data points. Each data point in the time series is a time stamp/numerical value pair.


Estimate your monthly costs for Azure services

Review Azure pricing frequently asked questions

Learn more about Azure Defender

Review technical tutorials, videos, and more resources

Added to estimate. Press 'v' to view on calculator

Learn and build with $200 in credit, and keep going for free