Microsoft Security
Solutions
Products
Services
Partners
Resources
Search
Contact Sales
Strengthen your Zero Trust posture—a new, unified approach to security is here
Read the blog
Microsoft Defender XDR
Elevate your security with unified visibility, investigation, and response across
the cyberattack chain with an industry-leading extended detection and
response (XDR) solution.
Microsoft is named a leader in the 2024, Q2 Forrester Extended Detection and
Response Wave
Learn more
Supercharge your SecOps effectiveness with XDR
Get incident-level visibility across the cyberattack chain with Microsoft Defender XDR
(formerly Microsoft 365 Defender). Take your SOC team to the next level with automatic
disruption of advanced cyberattacks and accelerated response across endpoints and IoT,
hybrid identities, email and collaboration tools, software as a service (SaaS) applications,
cloud workloads, and data.
Endpoints
Discover and secure endpoint and network
devices across your multiplatform
enterprise.
Identities
Manage and secure hybrid identities and
simplify employee, partner, and customer
access.
SaaS apps
Get visibility, control data, and detect
cyberthreats across cloud services and
apps.
Email and collaboration tools
Protect your email and collaboration tools
from advanced cyberthreats, such as
phishing and business email compromise.
Microsoft Defender XDR key capabilities
Unify security with XDR.
Enable rapid response with XDR-
prioritized incidents
Reinvent SOC productivity with
Microsoft Security Copilot
Auto-heal affected assets
Proactively hunt for cyberthreats
Manage multitenant
environments more effectively
Automatically disrupt advanced
cyberattacks at machine speed
Back to Tabs
Automatically disrupt advanced cyberattacks at machine speed
Stop lateral movement of advanced cyberattacks, such as ransomware, with AI to limit a cyberattacker’s progress early on, and give your
SOC team full control to investigate and remediate cyberthreats.
Learn more
See Copilot in Microsoft Defender XDR
Watch how Copilot helps you investigate and complete complex tasks such as
cyberthreat hunting, reverse-engineering malware, and incident reporting.
Watch the demo
Learn more about Microsoft Security Copilot
Microsoft 365 E5, A5, F5, and G5 customers can save on Microsoft Sentinel
Learn more
Unified security operations platform
Secure your digital estate with the only security operations (SecOps) platform
that unifies the full capabilities of extended detection and response (XDR) and
security information and event management (SIEM).
Back to tabs
Unified portal
Detect and disrupt cyberthreats in near real time and streamline investigation and response.
Learn more about Microsoft unified XDR and SIEM
See what’s new in cyberthreat protection and AI
Discover the latest trends and best practices in cyberthreat protection and AI
for cybersecurity with our library of webcasts, e-books, and analyst reports.
Get the latest resources
Industry recognition
Microsoft Security is a recognized industry leader.
Learn more
A leader in the Forrester XDR Wave
Microsoft Defender is named a Leader in The Forrester Wave™: Extended Detection And
Response (XDR) Platforms, Q2 2024.
1, 2
Read the blog
Leader in MITRE ATT&CK
Microsoft Defender XDR (formerly Microsoft 365 Defender) demonstrates 100 percent
protection coverage in the 2023 MITRE Engenuity ATT&CK® Evaluations.
3
Read the blog
What our customers are saying
“Having a strong security posture focused on
protecting physical security and the security of
devices, identities, and data is critical to company
stability and were key components to a successful
defense against cyberattacks.”
- Eric McKinney, Enterprise Infrastructure Director, G&J
Pepsi-Cola Bottlers
The Total Economic Impact™
Of Microsoft Defender XDR
(formerly Microsoft 365
Defender)
A 2022 study found a return on investment of 242% over three years
and a net present value of USD$17 million with Microsoft 365
Defender.
4
Related products
Use best-in-class Microsoft security products to prevent and detect cyberattacks across
your Microsoft 365 workloads.
Learn more
Microsoft Defender for
Endpoint
Deliver preventive protection, post-
breach detection, automated
investigation, and response for
endpoints.
Learn more
Microsoft Defender for
Identity
Manage and secure hybrid identities
and simplify employee, partner, and
customer access.
Learn more
Microsoft Defender for
Office 365
Help secure your email, documents,
and collaboration tools with Microsoft
Defender for Office 365.
Learn more
Microsoft Defender for
Cloud Apps
Get visibility, control data, and detect
cyberthreats across cloud services and
apps.
Learn more
Documentation and training for Microsoft
Defender XDR
Microsoft Defender XDR
infographic
Get an overview of how XDR helps
stop cyberattacks and coordinates
responses across assets.
Learn more
Understand your plan
options
Get an overview of all plans that
include Microsoft Defender XDR
capabilities.
Learn more
Microsoft Defender XDR
Blog
Learn best practices, get updates,
and engage with product teams in
the Microsoft Defender XDR tech
community.
Read the blog
Evaluate and pilot
Microsoft Defender XDR
Use technical guidance to get
started and pilot Microsoft Defender
XDR.
Learn more
Protect everything
Make your future more secure. Explore your security options today.
Frequently asked questions
|
Expand all
Collapse all
What is Microsoft Defender XDR?
What is the difference between Microsoft Defender XDR and Microsoft Sentinel?
Is Microsoft Defender XDR included in Microsoft 365?
Which products are included in Microsoft Defender XDR?
[1] Forrester, Forrester New Wave, Forrester Wave, and The Total Economic Impact are trademarks of Forrester Research, Inc.
[2] The Forrester Wave™: Extended Detection And Response (XDR) Platforms, Q2 2024, June 2024.
[3] MITRE Engenuity ATT&CK® Evaluations: Enterprise, Wizard Spider + Sandworm Enterprise Evaluation 2023, The MITRE Corporation and MITRE Engenuity.
[4] The Total Economic Impact™ Of Microsoft Defender XDR (formerly Microsoft 365 Defender), a commissioned study conducted by Forrester Consulting, April 2022.
Follow Microsoft Security
Skip
Microsoft Security
Strengthen your Zero Trust posture
—a new, unified approach to
security is here
Read
the
blog
Microsoft Defender XDR
Elevate your security with unified visibility,
investigation, and response across the
cyberattack chain with an industry-leading
extended detection and response (XDR)
solution.
Microsoft is named a leader in the 2024,
Q2 Forrester Extended Detection and
Response Wave
Learn more
Supercharge your SecOps
effectiveness with XDR
Get incident-level visibility across the cyberattack
chain with Microsoft Defender XDR (formerly
Microsoft 365 Defender). Take your SOC team to
the next level with automatic disruption of
advanced cyberattacks and accelerated response
across endpoints and IoT, hybrid identities, email
and collaboration tools, software as a service (SaaS)
applications, cloud workloads, and data.
Endpoints
Discover and secure endpoint and network devices
across your multiplatform enterprise.
Identities
Manage and secure hybrid identities and simplify
employee, partner, and customer access.
SaaS apps
Get visibility, control data, and detect cyberthreats
across cloud services and apps.
Email and collaboration tools
Protect your email and collaboration tools from
advanced cyberthreats, such as phishing and
business email compromise.
Microsoft Defender XDR key
capabilities
Unify security with XDR.
Enable rapid response with
XDR-prioritized incidents
Reinvent SOC productivity
with Microsoft Security
Copilot
Auto-heal affected assets
Proactively hunt for
cyberthreats
Manage multitenant
environments more
effectively
Automatically disrupt
advanced cyberattacks at
machine speed
Back to Tabs
Automatically disrupt advanced
cyberattacks at machine speed
Stop lateral movement of advanced cyberattacks,
such as ransomware, with AI to limit a
cyberattacker’s progress early on, and give your
SOC team full control to investigate and remediate
cyberthreats.
Learn more
See Copilot in Microsoft Defender
XDR
Watch how Copilot helps you investigate and
complete complex tasks such as cyberthreat
hunting, reverse-engineering malware, and
incident reporting.
Watch the demo
Learn more about Microsoft Security
Copilot
Microsoft 365 E5, A5, F5, and G5
customers can save on Microsoft
Sentinel
Learn more
Unified security operations
platform
Secure your digital estate with the only security
operations (SecOps) platform that unifies the
full capabilities of extended detection and
response (XDR) and security information and
event management (SIEM).
Back to tabs
Unified portal
Detect and disrupt cyberthreats in near real
time and streamline investigation and
response.
Learn more about Microsoft unified
XDR and SIEM
See what’s new in cyberthreat
protection and AI
Discover the latest trends and best practices
in cyberthreat protection and AI for
cybersecurity with our library of webcasts, e-
books, and analyst reports.
Get the latest resources
Industry recognition
Microsoft Security is a recognized industry leader.
Learn more
A leader in the Forrester XDR Wave
Microsoft Defender is named a Leader in The
Forrester Wave™: Extended Detection And
Response (XDR) Platforms, Q2 2024.
1, 2
Read the blog
Leader in MITRE ATT&CK
Microsoft Defender XDR (formerly Microsoft 365
Defender) demonstrates 100 percent protection
coverage in the 2023 MITRE Engenuity ATT&CK®
Evaluations.
3
Read the blog
What our customers are saying
“Having a strong security posture focused on
protecting physical security and the security
of devices, identities, and data is critical to
company stability and were key components
to a successful defense against
cyberattacks.”
- Eric McKinney, Enterprise Infrastructure
Director, G&J Pepsi-Cola Bottlers
The Total Economic Impact™
Of Microsoft Defender XDR
(formerly Microsoft 365
Defender)
A 2022 study found a return on investment
of 242% over three years and a net present
value of USD$17 million with Microsoft 365
Defender.
4
Related products
Use best-in-class Microsoft security products to
prevent and detect cyberattacks across your
Microsoft 365 workloads.
Learn more
Microsoft Defender for Endpoint
Deliver preventive protection, post-breach
detection, automated investigation, and
response for endpoints.
Learn more
Documentation and training for
Microsoft Defender XDR
Microsoft Defender XDR infographic
Get an overview of how XDR helps stop
cyberattacks and coordinates responses
across assets.
Learn more
Understand your plan options
Get an overview of all plans that include
Microsoft Defender XDR capabilities.
Learn more
Microsoft Defender XDR Blog
Learn best practices, get updates, and
engage with product teams in the Microsoft
Defender XDR tech community.
Read the blog
Evaluate and pilot Microsoft Defender
XDR
Use technical guidance to get started and
pilot Microsoft Defender XDR.
Learn more
Protect everything
Make your future more secure. Explore your
security options today.
Frequently asked questions
|
Expand all
Collapse all
What is Microsoft Defender XDR?
What is the difference between Microsoft
Defender XDR and Microsoft Sentinel?
Is Microsoft Defender XDR included in
Microsoft 365?
Which products are included in Microsoft
Defender XDR?
[1] Forrester, Forrester New Wave, Forrester Wave, and The
Total Economic Impact are trademarks of Forrester
Research, Inc.
[2] The Forrester Wave™: Extended Detection And
Response (XDR) Platforms, Q2 2024, June 2024.
[3] MITRE Engenuity ATT&CK® Evaluations: Enterprise,
Wizard Spider + Sandworm Enterprise Evaluation 2023,
The MITRE Corporation and MITRE Engenuity.
[4] The Total Economic Impact™ Of Microsoft Defender
XDR (formerly Microsoft 365 Defender), a commissioned
study conducted by Forrester Consulting, April 2022.
Follow Microsoft Security
What's new
Surface Pro
Surface Laptop
Surface Laptop Studio 2
Surface Laptop Go 3
Microsoft Copilot
AI in Windows
Explore Microsoft products
Windows 11 apps
Microsoft Store
Account profile
Download Center
Microsoft Store Support
Returns
Order tracking
Microsoft Experience Centre
Recycling
Microsoft Store Promise
Education
Microsoft in education
Devices for education
Microsoft Teams for Education
Microsoft 365 Education
Office Education
Educator training and development
Deals for students and parents
Azure for students
Business
Microsoft Cloud
Microsoft Security
Azure
Dynamics 365
Microsoft 365
Microsoft 365 Copilot
Microsoft Teams
Small Business
Developer & IT
Microsoft Developer
Documentation
Microsoft Learn
Microsoft Tech Community
Azure Marketplace
AppSource
Microsoft Power Platform
Visual Studio
Company
Careers
About Microsoft
Company news
Privacy at Microsoft
Investors
Sustainability
English (United Kingdom)
Your Privacy Choices
Consumer Health Privacy
Contact Microsoft
Privacy
Manage cookies
Terms of use
Trademarks
About our ads
EU Compliance DoCs
Regulatory reporting
© Microsoft 2025
What's new
Surface Pro
Surface Laptop
Surface Laptop Studio 2
Surface Laptop Go 3
Microsoft Copilot
AI in Windows
Explore Microsoft products
Windows 11 apps
Microsoft Store
Account profile
Download Center
Microsoft Store Support
Returns
Order tracking
Microsoft Experience Centre
Recycling
Microsoft Store Promise
Education
Microsoft in education
Devices for education
Microsoft Teams for Education
Microsoft 365 Education
Office Education
Educator training and development
Deals for students and parents
Azure for students
Business
Microsoft Cloud
Microsoft Security
Azure
Dynamics 365
Microsoft 365
Microsoft 365 Copilot
Microsoft Teams
Small Business
Developer & IT
Microsoft Developer
Documentation
Microsoft Learn
Microsoft Tech Community
Azure Marketplace
AppSource
Microsoft Power Platform
Visual Studio
Company
Careers
About Microsoft
Company news
Privacy at Microsoft
Investors
Sustainability
English (United Kingdom)
Your Privacy Choices
Consumer Health Privacy
Contact Microsoft
Privacy
Manage cookies
Terms of use
Trademarks
About our ads
EU Compliance DoCs
Regulatory reporting
© Microsoft 2025