CyberIndexBeta

Product

Endpoint security offering for small and medium businesses built on Defender for Endpoint capabilities. It runs on Android, iOS, macOS and Windows. Recorded capabilities include behavioral detection, central management console, malware detection and ransomware protection. The stated market is small and medium business. Microsoft Defender for Business is sold on subscription.

Current Version
Not known
Market
SMB
Licence
Paid
Price
USD 3 / monthly
Record Created
2026-09-19
Last Updated
2026-10-10

Vendor

Microsoft is the largest security vendor in this index by installed base, and almost none of that was bought deliberately: Microsoft Defender Antivirus is built into Windows and switched on by default, so it protects any machine whose owner has not installed something else. That changes how its results should be read — it is the baseline every other product in this index is implicitly compared against. The paid products are a different thing from the built-in one. Microsoft Defender for Endpoint adds detection and response, threat and vulnerability management and central policy to the same engine; Microsoft Defender for Business is the smaller-organisation edition; Microsoft Defender XDR correlates signals across endpoints, identity, email and cloud apps; and Microsoft Sentinel is the SIEM above them. Microsoft Defender for Individuals, included with Microsoft 365, is the consumer application. Microsoft enters the public test cycles regularly, and its results are among the most consistently available in this index — useful, because for many readers the real question is not which product is best in the abstract but whether a paid product beats the one already installed. Vendor page →

Country
United States
Headquarters
Redmond, United States
Year Established
1975
Customers
1.6M organisations
Users
1.4B devices protected
Revenue
$331.8B (2026)

Platforms

Androidnative
iOSnative
macOSnative
Windowsnative

Target Market

SMB primary

Capabilities

Malware Detectionkeynative
Ransomware Protectionkeynative
Behavioral Detectionkeynative
Web ProtectionkeyNot known
Email ProtectionNot known
Host FirewallNot known
Sandbox AnalysisNot known
Cloud-Assisted ScanningNot known
Heuristic DetectionNot known
Device ControlNot known
Vulnerability ShieldingNot known
Central Management Consolenative

8 of 12 not yet known — not recorded, which is not the same as not supported.

Pricing

PlanLicencePriced perBilledPrice
SummarySubscriptionnot statedmonthlyUSD 3

Versions

Not known

The newest release each source names per platform, not every release the vendor has shipped. A release date is shown only where one is recorded.

Independent Tests

Not tested This product does not appear in any test run CSI holds. That is not a low score.

Certifications

Not known

Change History

This record was created 2026-09-19. Everything below is what has changed since.

  • 2026-09-23Capability addedCentral Management Console: built inevidence
  • 2026-09-23Capability addedBehavioral Detection: built inevidence
  • 2026-09-23Capability addedRansomware Protection: built inevidence
  • 2026-09-23Capability addedMalware Detection: built inevidence
  • 2026-09-22Product updatedListed in Small Business Antimalwareevidence
  • 2026-09-20Pricing plan addedPrice: USD 3 monthlyevidence
  • 2026-09-19Product updatedSold to: SMBevidence
  • 2026-09-19Product createdNew product listedevidence
  • 2026-09-19Platform addedRuns on Androidevidence
  • 2026-09-19Platform addedRuns on macOSevidence
  • 2026-09-19Platform addedRuns on Windowsevidence
  • 2026-09-19Platform addedRuns on iOSevidence

May we count your visit? CyberIndex would like to use Google Analytics to see which pages are read. It sets cookies and sends your visit to Google. Decline and nothing is loaded — the site works the same either way. Privacy.