Productivity apps
Not included
Licence AtlasUK editionStandalone
Defender for Office 365 Plan 2
Threat hunting and automated response
Best for: Security teams needing advanced investigation, automation and attack simulation
Last checked5 October 2026
Last factual change20 August 2026
Primary sourceOpen Microsoft page ↗Price and headline entitlements were verified against the linked official Microsoft source.
Entitlement status
What the licence includes
Each capability is labelled so included rights and additional requirements are clear.
Advanced email threat protection
Teams
Advanced collaboration threat protection
Cloud storage
Protects supported SharePoint and OneDrive content
Identity & devices
Not included
Security & compliance
Threat hunting, AIR and attack simulation
AI & analytics
Campaign views and advanced investigation
Service-level detail
Included services
These service records explain the principal capabilities and important limits represented in this licence.
Microsoft Defender for Office 365 Plan 2
Plan 1 protection plus threat hunting, attack simulation and automated investigation and response.
- Everything in Defender for Office 365 Plan 1 Source ↗
- Threat Explorer and advanced hunting Source ↗
- Automated Investigation and Response Source ↗
- Attack simulation training Source ↗
Applications
Included experiences
Microsoft Defender portalAttack simulation training
Pricing caveat
These prices are provided by Microsoft and might not be the price you pay if you have a reseller. For accurate pricing, please speak with your appropriate reseller.