Microsoft Defender for Cloud Microsoft Defender

Gain unmatched hybrid security management and threat protection

Microsoft Defender for Cloud provides comprehensive, cloud-native protections from development to runtime in multicloud environments. Defender for Cloud helps you protect resources across Azure, other clouds, and on-premises through its Free tier and enhanced security capabilities.

Microsoft Defender for Cloud is free for the first 30 days. Any usage beyond 30 days will be automatically charged as per the pricing scheme below. 5

When you enable Microsoft Defender for Cloud, we automatically enroll and start protecting all your resources unless you explicitly decide to opt-out. For any resource that is protected by Defender for Cloud, you will be charged per the pricing model below.

Cloud Security Posture Management (CSPM)

Microsoft Defender for Cloud offers foundational and advanced cloud security posture management solutions to protect across your multicloud and hybrid environments. Foundational CSPM (for free) provides continuous assessments, security recommendations, Secure Score, and the Microsoft cloud security benchmark across Azure, Amazon Web Services(AWS), and Google Cloud.

Microsoft Defender CSPM provides advanced security posture capabilities including agentless vulnerability scanning, attack path analysis, integrated data-aware security posture, code to cloud contextualization, and an intelligent cloud security graph. Pricing is dependent on cloud size, with billing based only on only Server, Storage account, and Database counts.

Additionally, it includes DevOps security capabilities to empower security teams to manage DevOps security across multi-pipeline environments.

CSPM Plan Price
Foundational CSPM Free 1
1 Microsoft Defender CSPM protects across all your multicloud workloads, but billing only applies for Compute, Databases, and Storage resources. Billable workloads are VMs, Storage Accounts, OSS DBs, and SQL PaaS & Servers on Machines. Billing begins August 1, 2023.

Microsoft Defender for Cloud’s foundational CSPM capabilities include asset inventory, security assessment, DevOps posture visibility, Infrastructure as Code security, and compliance management. Learn more at Overview of Cloud Security Posture Management (CSPM) - Microsoft Defender for Cloud | Microsoft Learn.

Cloud workload protection plans

Microsoft Defender for Cloud provides cloud workload protection to help organizations quickly prevent, detect, and respond to modern threats across multicloud and hybrid environments. Get advanced threat protection capabilities to secure critical workloads across virtual machines (VMs), containers, databases, storage, app services, APIs, and more.
*The following prices are tax-inclusive.

*Monthly pricing estimates are based on 744 hours of usage per month.
Resource Type Resource Price
Servers Microsoft Defender for Servers Plan 2 ￥0.2/Server/hour

Included data - 500 MB/day

Containers Microsoft Defender for Containers ￥0.096/vCore/hour2
Databases Microsoft Defender for SQL on Azure-connected databases ￥0.2/Instance/hour1
Microsoft Defender for SQL outside Azure ￥0.152/Instance/hour 4
Microsoft Defender for MySQL ￥152.6/node/month
Microsoft Defender for PostgreSQL ￥152.6/node/month
Service Layer Microsoft Defender for App Service ￥0.2/Instance/hour
Microsoft Defender for DNS ￥7.122/M Queries
Microsoft Defender for Resource Manager ￥40.704/Subscription/month
Storage Microsoft Defender for Storage1 ￥1.52 per storage account for every 1 million transactions6

1 Microsoft Defender for SQL on Azure-connected databases price applies to SQL servers on Azure SQL Database, Azure SQL Managed Instance, Azure SQL elastic pools, Azure Synapse Analytics dedicated SQL pool, SQL on Azure Virtual Machines and SQL on Azure Arc enabled resources (in the customer's datacenter, on the edge or in a multi-cloud environment).

2 Pricing is performed based on vCores in your Kubernetes worker nodes supported by Defender for Containers. This price includes 20 free monthly vulnerability assessments performed in your container registry per charged vCore, whereby the count will be based on the previous month's consumption. Every subsequent scan will be charged at ￥2.952 per image digest. The majority of customers are not expected to incur any additional image scan charges.

3 Microsoft Defender currently protects Azure Blobs, Azure Files and Azure Data Lake Storage Gen2 resources.

4 Microsoft Defender for SQL outside Azure price applies to SQL Servers hosted outside of Azure in the customer's datacenter, on the edge or in a multi-cloud environment that are not Arc-enabled.

5 Malware Scanning in Defender for Storage is not included for free in the first 30 days and will be charged from the first day in accordance with the pricing scheme. Malware Scanning for Defender for Storage currently supports Azure Blob Storage only. Not available for Defender for Storage (classic).

6 Storage accounts that exceed 73 million monthly transactions will be charged ￥20.35 for every 1 million transactions that exceed the threshold.

Additional data charges for virtual machines only

Based on observed usage to date, most deployments do not exceed the daily 'included data' limit. However, if additional data is collected that exceeds the daily limit, or if you choose to retain your security data longer than 1 month, then additional charges will apply as follows:

*The following prices are tax-inclusive.

*Monthly pricing estimates are based on 744 hours of usage per month.
OVERAGE METER PRICE
Additional data uploaded over included daily data ￥ 23.4 /GB
Additional retention beyond one month ￥ 1.02 /month/GB

Support & SLA

If you have any questions or need help, please visit Azure Support and select self-help service or any other method to contact us for support.

To learn more about the details of our Service Level Agreement, please visit the Service Level Agreements page.