Microsoft Defender for Endpoint

Microsoft Enterprise Antimalware (primary)Compare with others in Enterprise Antimalware

Product

Microsoft Defender for Endpoint, previously named Microsoft Defender ATP, is Microsoft's endpoint security product for organisations, providing detection and response across multiple platforms. It runs on Android, iOS, Linux, macOS and Windows. The one capability recorded for it is malware detection. It is aimed at Enterprise buyers. Microsoft Defender for Endpoint is sold on a quoted basis rather than at a published price.

Current Version: 101.26032.0016
Product Page: microsoft.com/…/microsoft-defende…
Market: Enterprise
Licence: Paid
Price: Quote
Record Created: 2026-08-20
Last Updated: 2026-10-12

Vendor

Microsoft is the largest security vendor in this index by installed base, and almost none of that was bought deliberately: Microsoft Defender Antivirus is built into Windows and switched on by default, so it protects any machine whose owner has not installed something else. That changes how its results should be read — it is the baseline every other product in this index is implicitly compared against. The paid products are a different thing from the built-in one. Microsoft Defender for Endpoint adds detection and response, threat and vulnerability management and central policy to the same engine; Microsoft Defender for Business is the smaller-organisation edition; Microsoft Defender XDR correlates signals across endpoints, identity, email and cloud apps; and Microsoft Sentinel is the SIEM above them. Microsoft Defender for Individuals, included with Microsoft 365, is the consumer application. Microsoft enters the public test cycles regularly, and its results are among the most consistently available in this index — useful, because for many readers the real question is not which product is best in the abstract but whether a paid product beats the one already installed. Vendor page →

Website: microsoft.com
Country: United States
Headquarters: Redmond, United States
Year Established: 1975
Customers: 1.6M organisations
Users: 1.4B devices protected
Revenue: $331.8B (2026)

Platforms

Android	native
iOS	native
Linux	native
macOS	native
Windows	native

Target Market

Enterprise secondary

Capabilities

Pricing

Plan	Licence	Priced per	Billed	Price
Summary	Price on request	not stated	no recurring charge	Quote

Versions

101.26032.0016macOS
101.68.80Linux
10.0.28000.3086Windows

The newest release each source names per platform, not every release the vendor has shipped. A release date is shown only where one is recorded.

Independent Tests

At a glance — latest result per lab test

AV-Comparatives Business Security Test

Tested: Windows2026-07-15lab report ↗

AV-TEST Antivirus Test

Tested: Windowslab report ↗

MITRE ATT&CK Evaluations (Enterprise)

2024-12-11lab report ↗

SE Labs Enterprise Endpoint ProtectionAAA

2026-06-30lab report ↗

SE Labs Small Business Endpoint ProtectionAAA

2026-06-30lab report ↗

Each bar is one lab’s own figure on that lab’s own scale. Labs test different models at different times, so the figures are not combined into one score.

All results

AV-Comparatives Business Security TestAV-Comparatives Business Security Test — March–June 20262026-07-15

Protection Rate: 98.8%False Positives: 0

AV-Comparatives Business Security TestAV-Comparatives Business Security Test — August–November 20252025-12-15

Protection Rate: 99.1%False Positives: 2

AV-TEST Antivirus TestTest antivirus software for Windows 11 - June 2026

Protection: 6Performance: 5Usability: 6

AV-TEST Antivirus TestTest antivirus software for Windows 11 - August 2026

Protection: 6Performance: 5.5Usability: 6

MITRE ATT&CK Evaluations (Enterprise)MITRE ATT&CK Evaluations — Enterprise 20242024-12-11

Technique-level detection: 71.2%Any detection: 83.8%Benign activity not alerted: 100%Attack sub-steps evaluated: 80

SE Labs Enterprise Endpoint ProtectionEnterprise Endpoint Security 2026 Q2

AAAOverall 99Protection Accuracy: 96%Legitimate Accuracy: 100%Total Accuracy Rating: 99%

SE Labs Enterprise Endpoint ProtectionEnterprise Endpoint Security 2026 Q1

AAAOverall 100Protection Accuracy: 100%Legitimate Accuracy: 100%Total Accuracy Rating: 100%

SE Labs Small Business Endpoint ProtectionSMB Endpoint Security 2026 Q2

AAAOverall 99Protection Accuracy: 96%Legitimate Accuracy: 100%Total Accuracy Rating: 99%

SE Labs Small Business Endpoint ProtectionSMB Endpoint Security 2026 Q1

AAAOverall 100Protection Accuracy: 100%Legitimate Accuracy: 100%Total Accuracy Rating: 100%

Certifications

FedRAMPHigh1 activeF1209051525

OESIS Framework SupportSupported1 activeSupported

OPSWAT Certified Security ApplicationPlatinum1 activePlatinum

Change History

This record was created 2026-08-20. Everything below is what has changed since.

2026-10-12Certification addedCertified: FedRAMP (High)evidence
2026-10-09Test result addedNew AV-Comparatives Business Security Test resultevidence
2026-10-09Test result addedNew AV-Comparatives Business Security Test resultevidence
2026-10-07Test result addedNew MITRE ATT&CK Evaluations (Enterprise) resultevidence
2026-10-06New versionNew version: 10.0.28000.3086 (Windows)evidence
2026-09-30Test result addedNew SE Labs Small Business Endpoint Protection result: AAAevidence
2026-09-30Test result addedNew SE Labs Enterprise Endpoint Protection result: AAAevidence
2026-09-30Test result addedNew SE Labs Enterprise Endpoint Protection result: AAAevidence
2026-09-30Test result addedNew SE Labs Small Business Endpoint Protection result: AAAevidence
2026-09-30Test result addedNew AV-TEST Antivirus Test resultevidence
2026-09-23Platform addedRuns on iOSevidence
2026-09-23Platform addedRuns on Androidevidence
2026-09-22Product updatedListed in Enterprise Antimalwareevidence
2026-09-22Product updatedListed in Home Antimalwareevidence
2026-09-20Pricing plan addedPrice: price on requestevidence
2026-09-19Product updatedNo longer sold to: Consumerevidence
2026-09-18Test result addedNew AV-TEST Antivirus Test resultevidence
2026-09-09New versionNew version: 10.0.28000.2269 (Windows)evidence
2026-09-09New versionNew version: 101.26032.0016 (macOS)evidence
2026-09-09New versionNew version: 101.68.80 (Linux)evidence
2026-08-20Certification addedCertified: OESIS Framework Support (Supported)evidence
2026-08-20Capability addedMalware Detection: built inevidence
2026-08-20Pricing plan addedPrice: paidevidence
2026-08-20Product updatedAlso sold to: Enterpriseevidence
2026-08-20Product updatedAlso sold to: Consumerevidence
2026-08-20New versionNew version: 101.26032.0016evidence
2026-08-20Platform addedRuns on macOSevidence
2026-08-20Platform addedRuns on Linuxevidence
2026-08-20Platform addedRuns on Windowsevidence
2026-08-20Certification addedCertified: OPSWAT Certified Security Application (Platinum)evidence
2026-08-20Product createdNew product listedevidence

Something wrong? Suggest a correction →

Malware Detectionkey	native
Ransomware Protectionkey	Not known
Behavioral Detectionkey	Not known
Web Protectionkey	Not known
Email Protection	Not known
Host Firewall	Not known
Sandbox Analysis	Not known
Cloud-Assisted Scanning	Not known
Heuristic Detection	Not known
Device Control	Not known
Vulnerability Shielding	Not known
Central Management Console	Not known