Extended detection and response (XDR)

Email and collaboration security including enhanced phishing protection

Antivirus and antimalware

Full endpoint security including endpoint detection and response, and ransomware protection

Full SaaS security including malicious OAuth app protection

Hybrid identity protection (ITDR)

Multi Factor Authentication

Single-sign-on (SSO)

Windows Hello for Business

Role-based access control (RBAC)

Cross-tenant user synchronization, multitenant organizations

Global password protection and management

Conditional Access

Session lifetime management

SharePoint limited access

Application launch portal and user application collections in My Apps

Employee self-service: password change, reset, and unlock; sign-in activity search and reporting

Advanced security and usage reports

Risk-based Conditional Access

Authentication context (step-up authentication)

Device and application filters for Conditional Access

Real-time dynamic sign-in assessment

Real-time dynamic user sign-in assessment

Token protection

Vulnerabilities and risky account detection

Risk event investigation

Automated user provisioning to SaaS apps

Automated user provisioning to on-premises apps

Automated group provisioning to apps

HR-driven provisioning

Terms of use attestation

Access certification and reviews

Entitlement management

Privileged identity management

Verifiable credentials issuance

Verifiable credentials verification

Flexible deployment options

Universal tenant restrictions

Source IP restoration and compliant network controls

Prevent loss of sensitive data across apps, browsers, on-premises file shares, and other endpoints.

Identify, classify, and protect critical sensitive data; then manage and secure it across your environment.

Detect, investigate, and address potential insider risks, such as data theft or data leaks.

Respond to security events, forensic or internal investigations, and compliance needs with critical audit log records.

Discover and manage data and content to support legal matters or internal investigations.

Foster a safe and compliant workplace by detecting sensitive or inappropriate content in your organization’s systems.

Classify and govern data at scale to meet your legal, business, privacy, and regulatory content obligations.

Streamline multicloud and regulatory compliance with templates, step-by-step guidance, and insights.

Manage the lifecycle of records while meeting legal, business, privacy, and regulatory requirements

Cross-platform device management

Virtual and physical device management, company owned and personal (BYO) devices

Endpoint security policy management and baselines

Device compliance policies and conditional access enforcement

Application and operating systems management

Application protection policies and device configuration

Endpoint analytics