An Azure backup service that provides built-in management at scale.
Hello Handian Sudianto
Thank you for reaching out!
Enabling Threat Detection (Preview) on Azure Backup does not add any separate charge on top of your existing Azure Backup pricing. The feature itself is included, there is no extra line item billed by Azure Backup for turning it on.
However, this feature has a prerequisite , it requires Microsoft Defender for Servers (Plan 1 or Plan 2) to be enabled on your subscription. Defender for Servers is a paid service, and that's where the cost comes in:
Once Defender for Servers is enabled and Threat Detection is configured at the vault level, Azure Backup uses security signals from Microsoft Defender for Cloud (such as malware and ransomware detection) to evaluate the health of your backup restore points during snapshot creation. Each restore point is then tagged as Healthy, Suspicious, or Unknown helping you quickly identify clean recovery points during a ransomware event.
- Azure Backup Threat Detection feature → No additional Azure Backup charge.
- Microsoft Defender for Servers (required prerequisite) → Billed per server/month depending on the plan you choose.
If Defender for Servers is already enabled on your subscription, you can configure Threat Detection at no extra cost. If not, you'll need to factor in the Defender for Servers pricing.
Official Microsoft documentation for reference:
- Threat Detection in Azure Backup with Microsoft Defender for Cloud Integration (Preview)
- Tutorial: Configure Threat Detection and Manage Health of Azure VM Backups
- Microsoft Defender for Cloud Pricing
- Select a Defender for Servers Plan
Hope this helps clarify! Feel free to follow up if you have any further questions.
Thanks,
Suchitra.