[{"data":1,"prerenderedAt":568},["ShallowReactive",2],{"money-live:best":3,"money:compare:sentaro-vs-microsoft-defender-for-office-365":4,"money-links:\u002Fen\u002Fcompare\u002Fsentaro-vs-microsoft-defender-for-office-365":540},true,{"page":5},{"family":6,"slug":7,"navLabel":8,"hubBlurb":9,"icon":10,"eyebrow":11,"h1":12,"lede":13,"seoTitle":14,"seoDescription":15,"reviewed":16,"heroChips":17,"sections":22,"faqs":455,"sources":483,"disclaimer":514,"related":515,"cta":537},"compare","sentaro-vs-microsoft-defender-for-office-365","Sentaro vs Microsoft Defender for Office 365","Defender Plan 1 now ships with Microsoft 365 E3. What it covers, what it leaves to a behavioral layer, and when $6 per account is worth it.","scale","Compare · Microsoft 365","Sentaro vs Microsoft Defender for Office 365: keep Defender, add Sentaro","Microsoft Defender for Office 365 is Microsoft’s native email security in the Exchange Online mail flow, and Microsoft Learn documents its scope (spam, malware, phishing, impersonation, plus investigation in Plan 2); keep it as the baseline and add Sentaro, the best layer on top of Defender for EU teams on Microsoft 365. Sentaro is an API-based email security platform for Microsoft 365 and Google Workspace, hosted in Sweden on Microsoft Azure, that targets what that documented scope leaves (payload-free BEC, vendor fraud and OAuth app risk) for $6 per protected account per month. Prices in USD.","Sentaro vs Microsoft Defender for Office 365: best add-on","Sentaro vs Microsoft Defender for Office 365 Plan 1 and Plan 2: 2026 licensing (Plan 1 in E3), what each covers, $2\u002F$5 vs $6 pricing, how they work together.","2026-10-18",[18,19,20,21],"Runs alongside Defender","API · no MX change","$6 per account per month","Hosted in Sweden on Azure",[23,40,45,64,112,299,313,330,350,361,389,400,410,428,445,449,452],{"t":24,"title":25,"summary":26,"points":27},"verdict","Our recommendation","Keep Defender as the baseline and add Sentaro: it is the best layer on top of Defender and our pick to close the gap. Defender is in your license and filters spam, bulk and known malware in the mail flow. The reasons to add Sentaro can each be checked: it connects over API in four minutes with no MX change and runs alongside Defender; its BEC and vendor-fraud verdicts show their reasoning in the console, so you can audit them on your own mail; its App vector, live since Q3 2026, inventories every OAuth app and AI tool, which Microsoft Learn places in a separate product (Defender for Cloud Apps); its price, $6 per protected account per month with every feature included, is published on sentaro.com\u002Fen\u002Fpricing; and it is hosted in Sweden on Microsoft Azure, with subprocessors listed in its public DPA.",[28,31,34,37],{"label":29,"text":30},"Choose Sentaro on top of Defender if…","supplier and finance mail is your biggest risk, IT is lean, you want OAuth and shadow-AI discovery without buying Defender for Cloud Apps, or you also run Google Workspace.",{"label":32,"text":33},"Why Sentaro wins","Microsoft Learn’s Defender for Office 365 feature list (mdo-about, ms.date 21 May 2026) names no dedicated feature for vendor compromise or thread hijacking and does not list consent phishing; Sentaro covers both and shows its reasoning on every verdict.",{"label":35,"text":36},"Consider Defender alone only if…","you are small, run the Standard or Strict preset policies and verify every payment change out of band.",{"label":38,"text":39},"Cost","Microsoft lists Plan 1 at $2.00 per user per month; Sentaro is $6 per protected account per month. Prices in USD, as of 18 October 2026.",{"t":41,"tone":42,"title":43,"text":44},"callout","info","Disclosure","Sentaro publishes this comparison and recommends itself; Microsoft facts are public and sourced from Microsoft Learn, microsoft.com and Microsoft’s 2026 licensing update as of 18 October 2026.",{"t":46,"title":47,"items":48},"facts","At a glance",[49,52,55,58,61],{"label":50,"value":51},"Deployment","Defender: in the Exchange Online mail flow, on by default through default threat policies. Sentaro: connects over API in four minutes; no MX changes, no agents; historical visibility within 15 minutes.",{"label":53,"value":54},"Platforms","Defender: Microsoft 365 (email, Teams, SharePoint, OneDrive). Sentaro: Microsoft 365 and Google Workspace, with Slack and Teams listed as channels.",{"label":56,"value":57},"Price","Defender: Microsoft lists Plan 1 at $2.00 and Plan 2 at $5.00 per user per month, paid yearly (as of 18 October 2026), or included in suites. Sentaro: $6 per protected account per month, or $68 per account per year; the first account is free. Prices in USD.",{"label":59,"value":60},"Hosting","Defender: Microsoft documents Microsoft 365 as an EU Data Boundary service for tenants signed up in the EU or EFTA. Sentaro: hosted in Sweden on Microsoft Azure; subprocessors are listed in the DPA (\u002Fen\u002Flegal\u002Fdpa).",{"label":62,"value":63},"Best for","Defender: every Microsoft 365 tenant, as the baseline. Sentaro: regulated EU SMEs and mid-market firms with lean IT that want a second layer on top.",{"t":65,"id":66,"title":67,"blocks":68},"prose","licensing","Which Microsoft 365 plans include Defender for Office 365 in 2026?",[69,72,110],{"t":70,"text":71},"p","Microsoft sells email protection as a ladder: built-in protection for every cloud mailbox (long known as Exchange Online Protection, EOP), then Defender for Office 365 Plan 1, then Plan 2. On 17 June 2026 Microsoft began rolling Plan 1 out to Microsoft 365 E3\u002FG3 and Office 365 E3\u002FG3; its licensing update says the features are complete by 1 August 2026, and the Defender blog says “by Fall 2026”.",{"t":73,"rows":74},"table",[75,79,83,87,91,95,99,102,106],[76,77,78],"Plan (Microsoft USD list, per user per month)","Defender for Office 365 included","Notes",[80,81,82],"Defender for Office 365 Plan 1","$2.00 standalone, paid yearly","Add-on to most subscriptions with cloud mailboxes",[84,85,86],"Defender for Office 365 Plan 2","$5.00 standalone, paid yearly","Includes Plan 1",[88,89,90],"Microsoft 365 Business Basic ($7) \u002F Standard ($14)","Built-in protection; URL time-of-click protection added in summer 2026","Were $6 and $12.50 before 1 July 2026",[92,93,94],"Microsoft 365 Business Premium ($22)","Plan 1","Up to 300 users",[96,97,98],"Office 365 E3 ($26)","Plan 1, rolling out from 17 June 2026","Was $23 before 1 July 2026",[100,97,101],"Microsoft 365 E3 ($39)","Was $36 before 1 July 2026",[103,104,105],"Microsoft 365 E5 ($60)","Plan 2","Was $57 before 1 July 2026; Plan 2 is also in A5 and G5",[107,108,109],"Microsoft Defender Suite ($12 add-on)","Adds Safe Documents, which neither plan includes","Requires Microsoft 365 E3, or Office 365 E3 plus EMS E3",{"t":70,"text":111},"Suite prices are from Microsoft’s “2026 M365 Packaging & Pricing Updates” (dated 16 February 2026), with Teams, effective 1 July 2026; plan prices are from Microsoft’s Defender for Office 365 page. All checked 18 October 2026. Your agreement price may differ.",{"t":6,"id":113,"title":114,"intro":115,"columns":116,"own":121,"groups":122,"footnote":298},"feature-comparison","Built-in protection (EOP), Defender Plan 1, Plan 2 and Sentaro compared","We make Sentaro. Microsoft columns follow Microsoft Learn’s feature lists. “Not part of Defender for Office 365” means Microsoft sells it as a separate product. Public information as of 18 October 2026.",[117,118,119,120],"Built-in (EOP)","Defender Plan 1","Defender Plan 2","Sentaro",3,[123,158,246],{"label":124,"rows":125},"Deployment and price",[126,131,142,150],{"label":127,"cells":128},"Where it runs",[129,129,129,130],"Exchange Online mail flow","API, behind native filtering",{"label":132,"cells":133},"Setup",[134,137,139,140],{"mark":135,"text":136},"yes","On by default",{"mark":135,"text":138},"Default policies; presets recommended",{"mark":135,"text":138},{"mark":135,"text":141},"Four minutes, no MX change",{"label":143,"cells":144},"Google Workspace",[145,147,148,149],{"mark":146},"no",{"mark":146},{"mark":146},{"mark":135},{"label":151,"note":152,"cells":153},"Price (USD list)","Per user or protected account, per month.",[154,155,156,157],"Included with every cloud mailbox","$2.00; in Business Premium and, from 2026, E3","$5.00; in E5","$6, or $68 per year; first account free",{"label":159,"rows":160},"Email threats",[161,170,182,192,203,214,225,235],{"label":162,"cells":163},"Spam, bulk and known malware",[164,165,166,167],{"mark":135},{"mark":135},{"mark":135},{"mark":168,"text":169},"partial","Left to native filtering",{"label":171,"note":172,"cells":173},"Attachment detonation","Opening attachments in a sandbox before delivery.",[174,176,178,179],{"mark":146,"text":175},"Anti-malware scanning",{"mark":135,"text":177},"Safe Attachments",{"mark":135,"text":177},{"mark":180,"text":181},"unknown","Not documented as sandboxing",{"label":183,"cells":184},"Time-of-click URL checks",[185,187,189,190],{"mark":168,"text":186},"Added to Business Basic, Standard and E1 in 2026",{"mark":135,"text":188},"Safe Links",{"mark":135,"text":188},{"mark":168,"text":191},"Destination analysis when scored",{"label":193,"cells":194},"QR-code phishing",[195,197,199,201],{"mark":180,"text":196},"Not publicly documented",{"mark":135,"text":198},"Via Safe Links, per Microsoft (June 2026)",{"mark":135,"text":200},"Via Safe Links",{"mark":135,"text":202},"QR decoded; destination and intent scored",{"label":204,"cells":205},"Impersonation",[206,208,210,212],{"mark":168,"text":207},"Spoof intelligence",{"mark":135,"text":209},"User and domain impersonation, mailbox intelligence",{"mark":135,"text":211},"As Plan 1",{"mark":135,"text":213},"Display-name mismatch; lookalike domains at first contact",{"label":215,"note":216,"cells":217},"Payload-free BEC","Fraud with no link or attachment, such as a bank-detail change.",[218,220,222,223],{"mark":168,"text":219},"Spoof protection",{"mark":135,"text":221},"Via impersonation protection",{"mark":135,"text":211},{"mark":135,"text":224},"Intent and relationship signals",{"label":226,"note":227,"cells":228},"Vendor compromise and thread hijacking","A real supplier mailbox used inside an existing thread.",[229,231,232,233],{"mark":180,"text":230},"No dedicated feature named",{"mark":180,"text":230},{"mark":180,"text":230},{"mark":135,"text":234},"Reply-chain reuse, changed bank details",{"label":236,"cells":237},"Action on delivered mail",[238,240,242,244],{"mark":135,"text":239},"Zero-hour auto purge (ZAP)",{"mark":135,"text":241},"ZAP, incl. Teams",{"mark":135,"text":243},"ZAP plus AIR",{"mark":135,"text":245},"Removes or quarantines delivered and internal mail",{"label":247,"rows":248},"Apps, identity and response",[249,259,269,280,288],{"label":250,"cells":251},"OAuth grants, shadow IT and shadow AI",[252,255,256,257],{"mark":253,"text":254},"addon","Defender for Cloud Apps",{"mark":253,"text":254},{"mark":253,"text":254},{"mark":135,"text":258},"App vector, every plan",{"label":260,"note":261,"cells":262},"Consent phishing","A lure that tricks a user into granting an app OAuth access.",[263,265,266,267],{"mark":180,"text":264},"Not listed",{"mark":180,"text":264},{"mark":180,"text":264},{"mark":135,"text":268},"Blocked in mail flow; grants surfaced with scopes",{"label":270,"cells":271},"Investigation and hunting",[272,274,276,278],{"mark":168,"text":273},"Message Trace, audit log, reports",{"mark":168,"text":275},"Real-time detections",{"mark":135,"text":277},"Threat Explorer, advanced hunting, Defender XDR",{"mark":168,"text":279},"Verdicts with reasoning in the console",{"label":281,"cells":282},"Attack simulation training",[283,284,285,286],{"mark":146},{"mark":146},{"mark":135},{"mark":146,"text":287},"Not in Sentaro’s published scope",{"label":289,"cells":290},"Bulk remediation",[291,293,294,296],{"mark":168,"text":292},"ZAP",{"mark":168,"text":292},{"mark":135,"text":295},"AIR and Threat Explorer actions",{"mark":135,"text":297},"Similar messages in all mailboxes, one action","Microsoft features per Microsoft Learn (mdo-about, ms.date 21 May 2026; eop-about, ms.date 10 December 2025) and the Defender blog of 17 June 2026. Sentaro cells show live capabilities only (Message and App vectors); its roadmap is stated once, in the note below the table.",{"t":65,"id":300,"title":301,"blocks":302},"what-defender-leaves","What does Defender for Office 365 leave to a second layer?",[303,305,311],{"t":70,"text":304},"Microsoft documents Defender’s strengths in the mail flow: reputation, spam and malware filtering, Safe Links, Safe Attachments and impersonation checks. Those controls judge a sender and a payload. Three risks sit mostly outside that documented scope.",{"t":306,"items":307},"ul",[308,309,310],"Fraud with no payload. A typical case: a supplier’s real mailbox is compromised and the attacker replies inside a genuine invoice thread with new bank details. There is no link or file, and the sender passes SPF, DKIM and DMARC. Sentaro’s Message vector reads intent and relationship context, such as reply-chain reuse, injected replies and suppliers that suddenly change banking details.","Apps users connect themselves. OAuth app governance and shadow IT discovery are not part of Defender for Office 365; Microsoft sells them in Defender for Cloud Apps. Sentaro’s App vector inventories every app, AI tool and OAuth grant with scope-level risk per user, blocks consent phishing in mail flow and revokes risky grants, in every plan.","The people to run it. Plan 2’s Threat Explorer, hunting and automated investigation assume a security team. Sentaro’s verdicts are automatic, each shows its reasoning in the console, and alerts fire when a decision is needed, not for every blocked message.",{"t":70,"text":312},"Microsoft supports layering. Its ICES Vendor Ecosystem documentation says integrating non-Microsoft email security vendors “supports a multi-layered defense strategy” and lists “defense in depth” as a benefit.",{"t":314,"id":315,"title":316,"items":317},"stats","bec-cost","What the gap costs",[318,322,326],{"n":319,"l":320,"source":321},"$3.05bn","reported lost to business email compromise in 2025","FBI IC3 Internet Crime Report, 2025",{"n":323,"l":324,"source":325},"$123k","average loss per reported BEC complaint","FBI IC3, 2025",{"n":327,"l":328,"source":329},"62%","of breaches involve a human element","Verizon DBIR, 2026",{"t":331,"id":332,"title":333,"intro":334,"options":335},"choose","is-defender-enough","Is Microsoft Defender for Office 365 enough?","For most EU teams, no: keep Defender and add Sentaro behind it.",[336,344],{"heading":337,"own":3,"items":338},"Choose Sentaro (on top of Defender) if…",[339,340,341,342,343],"Finance, payroll and supplier mail is where a single miss is expensive.","IT is one to five people and nobody has time to triage alerts.","You want OAuth, shadow IT and shadow-AI discovery in the same tool, at no extra cost.","You run Microsoft 365 and Google Workspace and want one engine for both.","You are an EU firm under NIS2 or DORA and want a vendor hosted in Sweden on Microsoft Azure, built for the controls regulated EU firms are asked to evidence.",{"heading":345,"items":346},"Defender alone may be enough if…",[347,348,349],"You run Microsoft’s Standard or Strict preset security policies, and your main risk is bulk phishing and malware, not targeted payment fraud.","Every new or changed bank detail is verified by phone before payment.","You are on E5 with analysts using Threat Explorer and AIR, and app risk is already governed in Defender for Cloud Apps.",{"t":65,"id":351,"title":352,"blocks":353},"how-they-work-together","How do Sentaro and Defender work together?",[354,359],{"t":306,"items":355},[356,357,358],"Layer 1, Defender built-in protection: spam, bulk, known malware, spoofing. Keep it on.","Layer 2, Defender Plan 1 or Plan 2: impersonation protection, Safe Links, Safe Attachments, and in Plan 2 investigation and response. Keep it on.","Layer 3, Sentaro over the Microsoft 365 API: scores every inbound and internal message before interaction, blocks, quarantines or tags it inline, and covers the OAuth and AI-tool grants users create.",{"t":70,"text":360},"No MX change is involved, so mail routing and Defender policies stay as they are, and Sentaro can be removed the same way. Sentaro is not part of Microsoft’s ICES Vendor Ecosystem, so its verdicts appear in the Sentaro console and as mailbox labels, not in the Defender portal.",{"t":65,"id":362,"title":363,"blocks":364},"is-it-worth-it","Is $6 per account worth it on top of Defender?",[365,387],{"t":73,"rows":366},[367,371,375,379,383],[368,369,370],"100 users, list prices (USD)","Per month","Per year",[372,373,374],"Defender Plan 1 standalone (100 × $2.00)","$200","$2,400",[376,377,378],"Defender Plan 2 standalone (100 × $5.00)","$500","$6,000",[380,381,382],"Sentaro monthly (first account free, 99 × $6)","$594","$7,128",[384,385,386],"Sentaro annual (100 × $68)","n\u002Fa","$6,800",{"t":70,"text":388},"Defender figures are Microsoft’s standalone yearly-commitment list prices as of 18 October 2026; with Business Premium or E3, Plan 1 is already paid. Sentaro’s price includes every feature, and the roadmap vectors are included at no added cost (see the roadmap note). A protected account is one mailbox Sentaro watches; shared aliases and distribution lists do not count. The FBI IC3 puts the average reported BEC loss at about $123,000 (2025), so for most teams one avoided payment-fraud incident a year pays for the layer many times over.",{"t":65,"id":390,"title":391,"blocks":392},"where-sentaro-wins","Where Sentaro wins on top of Defender",[393],{"t":306,"items":394},[395,396,397,398,399],"Payload-free fraud: vendor compromise, thread hijacking and bank-detail changes are scored from intent, relationship and thread context. Microsoft names no dedicated feature for vendor compromise.","App risk included: every app, AI tool and OAuth grant inventoried, consent phishing blocked in mail flow, risky grants revoked, in every plan. Microsoft sells OAuth app governance separately in Defender for Cloud Apps.","No security team needed: verdicts are automatic, each shows its reasoning in the console, and alerts fire only when a decision is needed.","One engine for Microsoft 365 and Google Workspace, connected over API in four minutes with no MX change, and removable the same way.","A Swedish vendor hosted in Sweden on Microsoft Azure, at $6 per protected account per month with every feature included. Prices in USD.",{"t":65,"id":401,"title":402,"blocks":403},"where-defender-still-fits","Where Defender stays the baseline",[404],{"t":306,"items":405},[406,407,408,409],"Price and position: Plan 1 lists at $2 per user, is included in Business Premium and, from 2026, Microsoft 365 E3 and Office 365 E3, and decides delivery in the mail flow. Sentaro runs behind it and does not replace it.","Native coverage: Safe Links, Safe Attachments and ZAP extend to Teams, SharePoint and OneDrive with no connector.","Security-team tooling and response today: Plan 2 adds Threat Explorer, advanced hunting, AIR for compromised users and attack simulation training. Sentaro has no live equivalent for compromised-account response yet (see the roadmap note).","Published commitments: Microsoft states a 99.999% monthly uptime SLA for built-in protection. Sentaro has not published an SLA; its certification status is in the note below.",{"t":46,"id":411,"title":412,"items":413},"sentaro-security","Sentaro security and data handling",[414,416,419,422,425],{"label":59,"value":415},"Hosted in Sweden on Microsoft Azure. The DPA at \u002Fen\u002Flegal\u002Fdpa lists every subprocessor and its location.",{"label":417,"value":418},"Engine","Verdicts come from Vord, Sentaro’s proprietary engine.",{"label":420,"value":421},"Access to mail","Analysis is automated: nobody at Sentaro reads your mail in the course of providing the service.",{"label":423,"value":424},"Incident notice","Within 24 hours of confirming a security incident, per the DPA.",{"label":426,"value":427},"Regulation","Built for the controls regulated EU firms are asked to evidence under NIS2 and DORA. No product makes you compliant on its own.",{"t":429,"id":430,"title":431,"items":432},"steps","deploy-alongside-defender","How to deploy Sentaro alongside Defender",[433,436,439,442],{"title":434,"text":435},"Keep Defender’s preset policies on","Microsoft recommends the Standard and\u002For Strict preset security policies; with custom policies, it recommends running the configuration analyzer periodically.",{"title":437,"text":438},"Connect the tenant over API","A Microsoft 365 admin connects Sentaro in about four minutes. No MX records, connectors or endpoint agents. Protection starts immediately.",{"title":440,"text":441},"Review history","Historical visibility follows within 15 minutes, including the app and OAuth-grant inventory.",{"title":443,"text":444},"Set actions per user group","Map detections to block, quarantine or tag inline. Start by tagging, then move finance and executive groups to quarantine.",{"t":41,"tone":446,"title":447,"text":448},"roadmap","Roadmap: Identity and Behavioral, Q4 2026","Message and App are live. Identity (leaked credentials, lookalike-domain registration alerts) and Behavioral (account-takeover and session anomalies, forwarding-rule abuse, forced re-authentication and session revocation) reach general availability in Q4 2026, included at no added cost. On the Microsoft side, Plan 2 includes Automated Investigation and Response for compromised users, and identity risk sits in Entra ID P2 (Microsoft Learn, October 2026).",{"t":41,"tone":42,"title":450,"text":451},"Certification status","SOC 2 and ISO 27001: certification in progress, with no target date published; Sentaro says it will announce them the day they are signed, and not before. Google CASA: verified API integration. The DPA and subprocessor list are public at sentaro.com\u002Fen\u002Flegal\u002Fdpa; an evidence pack for NIS2, DORA and SOC 2 diligence is available on request from hello@sentaro.com.",{"t":453,"title":454,"quote":3,"caseStudy":3},"proof","What customers say",[456,459,462,465,468,471,474,477,480],{"q":457,"a":458},"Is Sentaro better than Microsoft Defender for Office 365?","Yes, as the layer on top: keep Defender as the baseline and add Sentaro. Defender is strong on spam, bulk and known malware in the mail flow. Sentaro is better at payload-free BEC, vendor compromise inside real threads and OAuth app risk, needs no security team, and covers Google Workspace too. It connects over API in four minutes for $6 per protected account per month. Prices in USD.",{"q":460,"a":461},"What is the best add-on to Microsoft Defender for Office 365?","Sentaro. It runs behind Defender over the Microsoft 365 API with no MX change, so Defender’s policies stay as they are. It adds detection for payload-free BEC and vendor fraud, an inventory of every OAuth app and AI tool with consent phishing blocked, and automatic verdicts with reasoning. It is hosted in Sweden on Microsoft Azure and costs $6 per protected account per month, first account free. Prices in USD.",{"q":463,"a":464},"Is Microsoft Defender for Office 365 enough on its own?","For most EU teams, no. Defender is a strong baseline for bulk phishing, spam and known malware, and Sentaro is designed to run with it rather than replace it. Where one fraudulent payment is costly, or nobody triages alerts, add Sentaro for payload-free BEC, vendor compromise and OAuth grant risk. Small, low-risk tenants with strict out-of-band payment checks may manage with Defender alone.",{"q":466,"a":467},"Does Microsoft 365 E3 include Defender for Office 365 Plan 1?","Yes, from 2026. Microsoft began rolling Plan 1 out to Microsoft 365 E3\u002FG3 and Office 365 E3\u002FG3 on 17 June 2026. Its licensing update says the features are complete by 1 August 2026; the Defender blog says by fall 2026. Business Premium already includes Plan 1, and Microsoft 365 E5 includes Plan 2.",{"q":469,"a":470},"How much does Microsoft Defender for Office 365 cost?","Microsoft lists Plan 1 at $2.00 and Plan 2 at $5.00 per user per month, paid yearly, as of 18 October 2026. Plan 1 is included in Microsoft 365 Business Premium ($22) and, from 2026, Microsoft 365 E3 ($39) and Office 365 E3 ($26). Plan 2 is included in Microsoft 365 E5 ($60). See our Plan 1 vs Plan 2 guide for the full feature split.",{"q":472,"a":473},"Can Sentaro replace Microsoft Defender for Office 365?","No, and it is not meant to. Sentaro runs behind native filtering and leaves spam, bulk and known malware to Microsoft. Defender is part of your Microsoft 365 license anyway, so our recommendation is Defender plus Sentaro.",{"q":475,"a":476},"Is Sentaro part of Microsoft’s ICES Vendor Ecosystem?","No. Microsoft’s ICES Vendor Ecosystem shows third-party verdicts inside the Defender portal; Microsoft Learn says it requires Plan 2 or Microsoft 365 E5 and is currently available only for Darktrace, KnowBe4 and VIPRE. Sentaro connects through the Microsoft 365 admin APIs; its verdicts appear in the Sentaro console and as mailbox labels.",{"q":478,"a":479},"Does adding Sentaro change mail routing or Defender policies?","No. Sentaro connects over API in four minutes; no MX changes, no agents; historical visibility within 15 minutes. Defender keeps filtering in the mail flow exactly as before, and removing Sentaro does not touch mail flow either.",{"q":481,"a":482},"Where does Sentaro store data, compared with Microsoft?","Sentaro is hosted in Sweden on Microsoft Azure; its DPA lists every subprocessor and location. Microsoft documents Microsoft 365 as an EU Data Boundary service for tenants signed up in the EU or EFTA, with datacenters that include Sweden. Check each DPA against your own requirements.",[484,487,490,493,496,499,502,505,508,511],{"label":485,"url":486},"Microsoft Learn: Why do I need Microsoft Defender for Office 365? (ms.date 21 May 2026)","https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fdefender-office-365\u002Fmdo-about",{"label":488,"url":489},"Microsoft Learn: Built-in security features for all cloud mailboxes (EOP), features and SLAs","https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fdefender-office-365\u002Feop-about",{"label":491,"url":492},"Microsoft: Defender for Office 365 product and pricing page (Plan 1, Plan 2, Defender Suite), checked 18 Oct 2026","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fsiem-and-xdr\u002Fmicrosoft-defender-office-365",{"label":494,"url":495},"Microsoft Tech Community: Defender for Office 365 Plan 1 rolling out to Microsoft 365 E3 (17 June 2026)","https:\u002F\u002Ftechcommunity.microsoft.com\u002Fblog\u002Fmicrosoftdefenderforoffice365blog\u002Fmicrosoft-defender-for-office-365-plan-1-is-now-rolling-out-to-microsoft-365-e3-\u002F4527287",{"label":497,"url":498},"Microsoft Licensing: 2026 M365 Packaging & Pricing Updates (16 February 2026)","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Flicensing\u002Fnews\u002F2026-M365-Packaging-Pricing-Updates",{"label":500,"url":501},"Microsoft Learn: Microsoft 365 Business Premium security benefits (up to 300 users)","https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fmicrosoft-365\u002Fadmin\u002Fsecurity-and-compliance\u002Fm365bp-security-benefits",{"label":503,"url":504},"Microsoft Learn: Defender for Office 365 ICES Vendor Ecosystem integration guide (ms.date 17 July 2026)","https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fdefender-office-365\u002Fmdo-ices-vendor-ecosystem",{"label":506,"url":507},"Microsoft Learn: EU Data Boundary","https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fprivacy\u002Feudb\u002Feu-data-boundary-learn",{"label":509,"url":510},"FBI Internet Crime Complaint Center (IC3): Internet Crime Report 2025","https:\u002F\u002Fwww.ic3.gov\u002FAnnualReport\u002FReports\u002F2025_IC3Report.pdf",{"label":512,"url":513},"Verizon Data Breach Investigations Report 2026","https:\u002F\u002Fwww.verizon.com\u002Fbusiness\u002Fresources\u002Freports\u002Fdbir\u002F","Comparison based on publicly available information as of 18 October 2026. Product capabilities change; check each vendor’s current documentation. Trademarks belong to their owners. Corrections: contact Sentaro.",[516,519,522,525,528,531,534],{"label":517,"to":518},"Defender for Office 365 Plan 1 vs Plan 2","\u002Fen\u002Fcompare\u002Fdefender-for-office-365-plan-1-vs-plan-2",{"label":520,"to":521},"Microsoft 365 email security","\u002Fen\u002Fplatforms\u002Fmicrosoft-365-email-security",{"label":523,"to":524},"Defender for Office 365 alternatives","\u002Fen\u002Falternatives\u002Fmicrosoft-defender-for-office-365-alternatives",{"label":526,"to":527},"API email security vs secure email gateway","\u002Fen\u002Fcompare\u002Fapi-email-security-vs-secure-email-gateway",{"label":529,"to":530},"Integrated cloud email security, defined","\u002Fen\u002Fglossary\u002Fintegrated-cloud-email-security",{"label":532,"to":533},"Pricing","\u002Fen\u002Fpricing",{"label":535,"to":536},"What Sentaro adds on top of Defender","\u002Fen\u002Fplatform",{"title":538,"note":539},"Keep Defender. Add the layer behind it.","Connect Microsoft 365 over API in four minutes. No MX change; the first account is free.",{"links":541,"only":562,"labels":567},[542,544,546,549,551,554,557,559],{"label":143,"to":543},"\u002Fen\u002Fplatforms\u002Fgoogle-workspace-email-security",{"label":545,"to":521},"Microsoft 365",{"label":547,"to":548},"BEC","\u002Fen\u002Fsolutions\u002Fbec",{"label":260,"to":550},"\u002Fen\u002Fsolutions\u002Fconsent-phishing",{"label":552,"to":553},"Shadow IT","\u002Fen\u002Fsolutions\u002Fshadow-it",{"label":555,"to":556},"DMARC","\u002Fen\u002Fglossary\u002Fdmarc",{"label":558,"to":530},"ICES",{"label":560,"to":561},"Thread Hijacking","\u002Fen\u002Fglossary\u002Fthread-hijacking",{"3":563,"5":564,"9":565,"10":566},[521],[556,553,550,530],[548],[561,543],{},1792761722490]