Microsoft Defender for Endpoint

Microsoft Defender for Endpoint is a cloud-native, multi-platform endpoint security solution that helps organizations prevent, detect, and respond to cyberthreats across Windows, macOS, Linux, Android, iOS, and IoT devices. Built on Microsoft’s large threat-signal footprint and AI capabilities, Defender for Endpoint delivers next-generation antimalware, endpoint detection and response (EDR), automated attack disruption to stop ransomware lateral movement and remote encryption, and exposure management to reduce attack surface risk. The product integrates threat intelligence and behavioral analytics to speed detection and remediation, and includes cloud-delivered protections, sandboxing for deep analysis, advanced hunting, and unified management through the Microsoft Defender XDR portal. Defender for Endpoint also offers device and network controls—such as web and network filtering, endpoint firewall, device control, and application control—while enabling security teams to streamline investigations with built-in generative AI via Microsoft Security Copilot. Licensing is offered in tiered plans to address foundational through advanced enterprise needs, and the service supports centralized policy and device management with Microsoft Intune and other Microsoft security services.