Get comprehensive security across multicloud and hybrid environments
Explore pricing options
Apply filters to customize pricing options to your needs.
Prices are estimates only and are not intended as actual price quotes. Actual pricing may vary depending on the type of agreement entered with Microsoft, date of purchase, and the currency exchange rate. Prices are calculated based on US dollars and converted using London closing spot rates that are captured in the two business days prior to the last business day of the previous month end. If the two business days prior to the end of the month fall on a bank holiday in major markets, the rate setting day is generally the day immediately preceding the two business days. This rate applies to all transactions during the upcoming month. Sign in to the Azure pricing calculator to see pricing based on your current program/offer with Microsoft. Contact an Azure sales specialist for more information on pricing or to request a price quote. See frequently asked questions about Azure pricing.
US government entities are eligible to purchase Azure Government services from a licensing solution provider with no upfront financial commitment, or directly through a pay-as-you-go online subscription.
Important—The price in R$ is merely a reference; this is an international transaction and the final price is subject to exchange rates and the inclusion of IOF taxes. An eNF will not be issued.
US government entities are eligible to purchase Azure Government services from a licensing solution provider with no upfront financial commitment, or directly through a pay-as-you-go online subscription.
Important—The price in R$ is merely a reference; this is an international transaction and the final price is subject to exchange rates and the inclusion of IOF taxes. An eNF will not be issued.
Microsoft Defender for Cloud provides comprehensive, cloud-native protections from development to runtime in multicloud environments. Defender for Cloud helps you protect resources across Azure, other clouds, and on-premises through its Free tier and enhanced security capabilities.
Microsoft Defender for Cloud is free for the first 30 days. Any usage beyond 30 days will be automatically charged as per the pricing scheme below.7
When you enable Microsoft Defender for Cloud, we automatically enroll and start protecting all your resources unless you explicitly decide to opt-out. For any resource that is protected by Defender for Cloud, you will be charged per the pricing model below.
Cloud Security Posture Management (CSPM)
Microsoft Defender for Cloud offers foundational and advanced cloud security posture management solutions to protect across your multicloud and hybrid environments. Foundational CSPM (for free) provides continuous assessments, security recommendations, Secure Score, and the Microsoft cloud security benchmark across Azure, Amazon Web Services(AWS), and Google Cloud.
Microsoft Defender CSPM provides advanced security posture capabilities including agentless vulnerability scanning, attack path analysis, integrated data-aware security posture, code to cloud contextualization, and an intelligent cloud security graph. Pricing is dependent on cloud size, with billing based only on only Server, Storage account, and Database counts.
Additionally, it includes DevOps security capabilities to empower security teams to manage DevOps security across multi-pipeline environments.
| CSPM Plan | Price |
|---|---|
| Foundational CSPM | Free1 |
| Defender Cloud Security Posture Management (CSPM) | $- |
Cloud workload protection plans
Microsoft Defender for Cloud provides cloud workload protection to help organizations quickly prevent, detect, and respond to modern threats across multicloud and hybrid environments. Get advanced threat protection capabilities to secure critical workloads across virtual machines (VMs), containers, databases, storage, app services, APIs, and more.
| Resource Type | Resource | Price |
|---|---|---|
| Servers | Microsoft Defender for Servers Plan 1 | $- |
| Microsoft Defender for Servers Plan 2 | $- | |
| Containers | Microsoft Defender for Containers | $-4 |
| Databases | Microsoft Defender for SQL on Azure-connected databases | $-2 |
| Microsoft Defender for SQL outside Azure | $-3 | |
| Microsoft Defender for MySQL | $- | |
| Microsoft Defender for PostgreSQL | $- | |
| Microsoft Defender for MariaDB | $- | |
| Microsoft Defender for Azure Cosmos DB5 | $- | |
| Storage | Microsoft Defender for Storage1 |
$-6 For existing customers using Defender for Storage (classic) per-transaction pricing, please refer to the Defender for Cloud portal. |
| Malware Scanning7 (add-on to Defender for Storage) |
$-/GB of data scanned | |
| APIs8 | Microsoft Defender for APIs Plan 1 | $- |
| Microsoft Defender for APIs Plan 2 | $- | |
| Microsoft Defender for APIs Plan 3 | $- | |
| Microsoft Defender for APIs Plan 4 | $- | |
| Microsoft Defender for APIs Plan 5 | $- | |
| Service Layer | Microsoft Defender for App Service | $- |
| Microsoft Defender for Key Vault | $-/Vault/month | |
| Microsoft Defender for Resource Manager | $-/Subscription/month |
Defender for Cloud – 1-year Pre Purchase Plan
You can get up to 22% savings over pay-as-you-go prices when you pre-purchase Microsoft Defender for Cloud Commit Units, to be used on any publicly available Microsoft Defender for Cloud plans over the subsequent 12 months. Your Microsoft Defender for Cloud usage will draw from your pre-purchased Commit Units at the individual plan's retail price (based on the the above tables) until they are exhausted, or until the end of the 12-month period. The purchase tiers and discounts for pre-purchase plan Commit Units are shown below:
| Tier | MDC Commit Units | Discount % | Price |
|---|---|---|---|
| 1 | 5,000.00 | 10% | $- |
| 2 | 10,000.00 | 12% | $- |
| 3 | 25,000.00 | 14% | $- |
| 4 | 50,000.00 | 16% | $- |
| 5 | 75,000.00 | 17% | $- |
| 6 | 100,000.00 | 18% | $- |
| 7 | 150,000.00 | 19% | $- |
| 8 | 200,000.00 | 20% | $- |
| 9 | 275,000.00 | 21% | $- |
| 10 | 350,000.00 | 22% | $- |
Additional data charges for virtual machines only
| Overage Meter | Price |
|---|---|
| Additional data uploaded over included daily data | See Azure Monitor pricing page for data ingestion pricing |
| Additional retention beyond one month | See Azure Monitor pricing page for data retention pricing |
Azure pricing and purchasing options
Connect with us directly
Get a walkthrough of Azure pricing. Understand pricing for your cloud solution, learn about cost optimization and request a custom proposal.
Talk to a sales specialistSee ways to purchase
Purchase Azure services through the Azure website, a Microsoft representative, or an Azure partner.
Explore your optionsAdditional resources
Microsoft Defender for Cloud
Learn more about Microsoft Defender for Cloud features and capabilities.
Pricing calculator
Estimate your expected monthly costs for using any combination of Azure products.
SLA
Review the Service Level Agreement for Microsoft Defender for Cloud.
Documentation
Review technical tutorials, videos, and more Microsoft Defender for Cloud resources.
Frequently asked questions
-
No. Subscriptions that had either Microsoft Defender for Kubernetes or Microsoft Defender for Container registries enabled prior to December 6, 2021 do not need to upgrade to the new Microsoft Defender for Containers offering. However, you will see an upgrade option inside the portal.
-
Customers who currently use Microsoft Defender for Kubernetes will continue to be able to use it for subscriptions where the service is already enabled.
-
Customers who currently use Microsoft Defender for Container registries will continue to be able to use it for subscriptions where the service is already enabled.
-
Yes. The new Microsoft Defender for Containers plan contains all features that were previously available via Microsoft Defender for Kubernetes and Microsoft Defender for container registries. In addition, the new plan contains a large set of new and improved capabilities and has removed previously existing dependencies on Microsoft Defender for Servers. Brand new features include Kubernetes-native deployment, advanced threat protection with Kubernetes-aware AI analytics and anomaly detection, and runtime visibility of vulnerabilities.
-
A transaction is an API call with a request payload size of up to 1,000 data points included in the time series. Each increment of 1,000 data points will be counted as an additional transaction. For example, an API call with request payload size of 2,050 data points is 3 transactions. The maximum request payload size is 8,640 data points. Each data point in the time series is a time stamp/numerical value pair.
-
For Azure Cosmos DB Serverless accounts, Microsoft Defender for Cosmos DB uses a conversion factor of 0.00003125, to convert serverless request units (RUs) to provisioned throughput. For example: An Azure Cosmos DB Serverless account with usage of 215 million RUs per month, will be charged $- for Microsoft Defender for Cosmos DB (215 million RUs * 0.00003125 * $- per 100 RU per second).
Talk to a sales specialist for a walk-through of Azure pricing. Understand pricing for your cloud solution.
Get free cloud services and a $200 credit to explore Azure for 30 days.