Unable to compare the difference of current and new upgrade in Defender plan for storage

Question

Current plan price in terms of the transactions count but present plan price in terms of the storage accounts count.

I didn't understand difference between the current and new plan prices, features.

Suppose after upgrading to new plan for the Microsoft defender on the storage services and even we do 10K transactions per month, will it going to be charge 10$ instead of 0.02 per month.

Answer 1

Hello

The current plan you have is 0,02$ per every 10K transaction, so if you would have 100K transactions it would be 0,2$ and so on :) while the new one is a set 10$ per active storage account you protect.

"The new Microsoft Defender for Storage plan has predictable pricing based on the number of storage accounts you protect. With the option to enable at the subscription or resource level and exclude specific storage accounts from protected subscriptions, you have increased flexibility to manage your security coverage. The pricing plan simplifies the cost calculation process, allowing you to scale easily as your needs change. Other charges might apply to storage accounts with high-volume transactions."

"On March 28, 2023, we introduced the new Defender for Storage plan. This plan offers several benefits not available in the Defender for Storage (classic) per-transaction or per-storage account pricing plans, such as":

• Enhanced activity monitoring: Continuous analysis of data plane and control plane activities for threat detection.
• Detection of compromised or abused SAS tokens: Continuous analysis of data plane and control plane activities for threat detection, including the detection of misconfigured and overly permissive Shared Access Signatures (SAS tokens) that might be leaked or compromised.
• Option to enable sensitive data threat detection (add-on): Detection of potential exposure events and suspicious activities on resources containing sensitive data resulting in data exfiltration.
• Option to enable malware scanning (paid add-on): Real-time detection of malicious files across all file types.
• Predictable, per-storage account pricing: A more foreseeable and flexible pricing structure for better control over coverage.
• Granular controls at the resource level: Enable at the subscription or resource level and exclude specific storage accounts from protected subscriptions, providing more granular control over your security coverage.

Also note that the old per transaction will be end of line soon.
https://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-for-storage-classic-migrate#important-changes-in-defender-for-storage-classic

Official price list
https://azure.microsoft.com/en-us/pricing/details/defender-for-cloud/

While it offers some benefits of having a more predictable cost, i kind of thing it's a little strange to have the pricing be 10$ per storage account, since ALZ follows the praxis of segment all our applications, meaning if i have 100 applications needing a tiny storage account each, that will add 1000$ amount for protecting does tiny storage accounts :) so i think there will be scenarios where a lot of people will either consolidate their storage accounts again or opt out of defender on a lot of them.

Hope this is helpful and remember shared knowledge is the best knowledge 😊

Best Regards,

Timmy Malmgren

If the Answer is helpful, please click "Accept Answer" and upvote it as it helps others to find what they are looking for faster!

Answer 2

@Rajoli Hari Krishna Thanks for raising this good question.

The old plan was charged at 0.02$ per 10k transactions.

The new plan is charged 10$ per month for the first 73M transactions. After, there is a fixed price per 1M transactions.

The new plan includes more security alerts, sensitivity scanning, and allows opt in for malware scanning at an extra charge.

Regarding your question - yes, after migrating, you will be charged 10$ for that account.

Note: Updating the comment