Microsoft Defender feature list: what it includes

Microsoft Defender can mean a few different products, so the feature list depends on which one you mean. The core features people usually mean are antivirus, threat detection, firewall, web protection, identity protection, and device management. Windows Security, Microsoft Defender for Business, and Microsoft Defender for Endpoint overlap, but they are not the same product, and the exact feature set changes by plan and platform.

Criteria

This list groups the main Microsoft Defender products people usually mean when they search for a feature list. The entries are based on the products named in the draft and on the features commonly associated with Defender across consumer and business setups, with the understanding that the exact feature set depends on the plan, the device, and the platform. Because no external research was retrieved, treat this as a practical overview, not a complete product matrix.

Entries

Windows Security

The built-in security app on Windows devices. This is the local protection layer on the PC itself and usually covers core protection features such as antivirus, threat detection, firewall, and web protection. On some devices or setups, parts of the experience are managed by Windows settings or by another organization’s security policy.

Microsoft Defender for Business

A business-focused Defender product for smaller organizations, usually managed from Microsoft 365. The feature set can include endpoint protection, threat detection, web protection, firewall controls, identity-related protections, and device management, but the exact mix depends on the license and the way the tenant is set up.

Microsoft Defender for Endpoint

The enterprise endpoint security platform with deeper detection, investigation, and response controls. This is the most advanced of the three named products here, and the feature list is typically broader for centralized security operations, including threat detection, web protection, firewall-related controls, identity protection, and device management features that can be applied across managed endpoints.

How to choose

Start by matching the product name to your device and management setup. If you just need the built-in Windows app, look at Windows Security. If you’re comparing security for a small business, check Microsoft Defender for Business. If you need enterprise endpoint security with centralized investigation and response, look at Microsoft Defender for Endpoint.

Before you decide, verify the exact plan and platform you’ll use, since features can differ between Windows and other operating systems, and some controls are only available when a device is centrally managed. The safest source of truth is the live Microsoft product page or admin center for the specific edition you’re evaluating.