Integration and licensing for Microsoft Security Exposure Management

Microsoft Security Exposure Management provides a comprehensive consolidation of security posture information from various Microsoft services and external data sources, ensuring robust security management and detailed insights.

What's integrated into Security Exposure Management?

Currently, Security Exposure Management consolidates security posture information and insights from workloads that include:

• Microsoft Defender for Endpoint
• Microsoft Defender for Identity
• Microsoft Defender for Cloud Apps
• Microsoft Defender for Office
• Microsoft Defender for IoT
• Microsoft Secure Score
• Microsoft Defender Vulnerability Management
• Microsoft Defender for Cloud
• Microsoft Entra ID
• Microsoft Defender External Attack Surface Management (EASM)

In addition to Microsoft services, Security Exposure Management allows you to connect to external data sources to further enrich and extend your security posture management. For more information on data connectors, see Data connectors overview.

How do I buy Microsoft Security Exposure Management?

Exposure Management is available in the Microsoft Defender portal at https://security.microsoft.com

Access to the exposure management blade and features in the Microsoft Defender portal according to the license requirements.

The following licenses allow accessing all Microsoft Security Exposure Management experiences:

• Microsoft 365 E5 or A5
• Microsoft 365 E3 with the Microsoft 365 E5 Security add-on
• Microsoft 365 E3 with the Enterprise Mobility + Security E5 add-on
• Microsoft 365 A3 with the Microsoft 365 A5 Security add-on
• Windows 10 Enterprise E5 or A5
• Windows 11 Enterprise E5 or A5
• Enterprise Mobility + Security (EMS) E5 or A5
• Office 365 E5 or A5
• Microsoft Defender for Endpoint
• Microsoft Defender for Identity
• Microsoft Defender for Cloud Apps or Cloud App Discovery
• Microsoft Defender for Office 365 (Plan 2)
• Microsoft 365 Business Premium
• Microsoft Defender for Business
• Microsoft Defender for Cloud

Integration of data from the above tools and other Microsoft Security tools like Microsoft Defender for Cloud, Microsoft Defender Cloud Security Posture Management, and Microsoft Defender External Attack Surface Management is available with those licenses.

Integration of non-Microsoft security tools will be a consumption-based cost based on number of assets in the connected security tool. The external connectors are free during public preview, and pricing will be announced before starting to bill for external connectors at GA.

The following licenses will allow access to Microsoft Secure Score experience only:

• Microsoft 365 E3
• Microsoft 365 A3
• Microsoft Defender for Office 365 (Plan 1)

Next steps

Review prerequisites to get started with Security Exposure Management.