Protect hybrid cloud workloads
Azure Defender, provides Extended Detection and Response for workloads running in Azure, on-premises, and in other clouds. Integrated with Security Center, Azure Defender protects your hybrid data, cloud native services and servers from threats; and integrates with your existing security workflows like your SIEM solution and Microsoft’s vast threat intelligence to streamline threat mitigation.
Explore pricing options
Apply filters to customize pricing options to your needs.
US government entities are eligible to purchase Azure Government services from a licensing solution provider with no upfront financial commitment, or directly through a pay-as-you-go online subscription.
Important—The price in R$ is merely a reference; this is an international transaction and the final price is subject to exchange rates and the inclusion of IOF taxes. An eNF will not be issued.
Azure Germany is available to customers and partners who have already purchased this, doing business in the European Union (EU), the European Free Trade Association (EFTA), and in the United Kingdom (UK). It provides data residency in Germany with additional levels of control and data protection. You can also sign up for a free Azure trial.
US government entities are eligible to purchase Azure Government services from a licensing solution provider with no upfront financial commitment, or directly through a pay-as-you-go online subscription.
Important—The price in R$ is merely a reference; this is an international transaction and the final price is subject to exchange rates and the inclusion of IOF taxes. An eNF will not be issued.
Azure Germany is available to customers and partners who have already purchased this, doing business in the European Union (EU), the European Free Trade Association (EFTA), and in the United Kingdom (UK). It provides data residency in Germany with additional levels of control and data protection. You can also sign up for a free Azure trial.
Azure Security Center protects Azure, on prem and hybrid resources through its Free tier and its integration with Azure Defender. Azure Security Center Free Tier includes continuous assessment and security recommendations, as well as Azure Secure Score.
When you enable Azure Defender, we automatically enroll and start protecting all your resources unless you explicitly decide to opt-out. For any resource that is protected by Azure Defender, you will be charged per the pricing model below.
Azure Defender is free for the first 30 days. Any usage beyond 30 days will be automatically charged as per the pricing scheme below.
| Resource Type | Price |
|---|---|
| Azure Defender for Servers |
$- Included data - 500 MB/day |
| Azure Defender for App Service | $- |
| Azure Defender for SQL on Azure | $-3 |
| Azure Defender for SQL outside Azure | $-4 |
| Azure Defender for MySQL (Preview) | Free1 |
| Azure Defender for PostgreSQL (Preview) | Free1 |
| Azure Defender for Storage - Protect all storage accounts within a subscription2 | $-/10K transactions |
| Azure Defender for Kubernetes | $-/vCore/hour |
| Azure Defender for ACR | $-/image |
| Azure Defender for Key Vault | $-/10K transactions |
| Azure Defender for ARM (Preview) | Free1 |
| Azure Defender for DNS (Preview) | Free1 |
Additional data charges for virtual machines only
| Overage Meter | Price |
|---|---|
| Additional data uploaded over included daily data | See Azure Monitor pricing page for data ingestion pricing |
| Additional retention beyond one month | See Azure Monitor pricing page for data retention pricing |
Azure Defender for IoT
Azure Defender for IoT delivers unified security for IoT/OT environments, offering two different sets of capabilities depending on whether you need to protect existing IoT/OT environments or are securing new IoT/OT devices that are provisioned and managed through IoT Hub.
Agentless monitoring
Azure Defender for IoT’s agentless monitoring capabilities protect existing enterprise IoT/OT environments, providing automatic asset discovery, vulnerability management, and threat detection. Today, Azure Defender for IoT’s agentless monitoring capabilities are available for on-premises deployment, with the option to connect to the cloud to send threat information to Azure Sentinel.
Azure Defender for IoT’s agentless monitoring capabilities are free of charge for the first 1,000 committed devices for the first 30 days. Beyond that, customers will automatically be charged per the pricing below. There is no cost for ingesting Azure Defender for IoT alerts and incidents into Azure Sentinel.
Note: The billing cycle for Azure Defender for IoT follows a calendar month. Any changes in device commitment (including subscription off-boarding) during a given month will only take effect in the next billing month.
| Solution | Price |
|---|---|
| Azure Defender for IoT agentless monitoring - on-premises | $-/month per 1,000 monitored devices, based on commitment1 |
Security for new devices provisioned through IoT Hub
Azure Defender for IoT also offers security for new devices provisioned and managed through IoT Hub, such as those that have the Azure Defender for IoT security agent installed. These security capabilities are free of charge for the first 30 days. Any usage beyond 30 days will be automatically charged per the pricing below.
| Solution | Price |
|---|---|
| Azure Defender for IoT for devices managed by IoT Hub – by device | $-/month |
| Azure Defender for IoT for devices managed by IoT Hub – by messages | $-/25K transactions |
Azure pricing and purchasing options
Connect with us directly
Get a walkthrough of Azure pricing. Understand pricing for your cloud solution, learn about cost optimization, and request a custom proposal.
Talk to a sales specialistSee ways to purchase
Purchase Azure services through the Azure website, a Microsoft representative, or an Azure partner.
Explore your optionsAdditional resources
Azure Defender details
Learn more about Azure Defender features and capabilities.
Pricing calculator
Estimate your expected monthly costs for using any combination of Azure products.
SLA
Review the Service Level Agreement for this product.
Documentation
Review technical tutorials, videos, and more Azure Defender resources.
Frequently asked questions
-
A transaction is an API call with a request payload size of up to 1,000 data points included in the time series. Each increment of 1,000 data points will be counted as an additional transaction. For example, an API call with request payload size of 2,050 data points is 3 transactions. The maximum request payload size is 8,640 data points. Each data point in the time series is a time stamp/numerical value pair.
Talk to a sales specialist for a walk-through of Azure pricing. Understand pricing for your cloud solution.
Get free cloud services and a $200 credit to explore Azure for 30 days.