Commercial transition
Previous stateThe standalone Microsoft Defender Threat Intelligence SKU remained active for existing subscriptions after its removal from the price-list preview.
→New stateAll standalone MDTI subscriptions end on 1 August 2026; MDTI capabilities remain available at no extra cost in the Defender portal to customers with Microsoft Defender or Microsoft Sentinel.
Who is affected
CSP direct-bill partners, indirect resellers, distributors and customers with active standalone Microsoft Defender Threat Intelligence subscriptions.
Action required
No feature migration is required; CSP partners must process Microsoft's credit memo for any remaining subscription term after 1 August and pass the credit through to affected customers.
Evidence boundary
qualifying underlying entitlements remain required; the change is not a universal free entitlement for organisations without Defender or Sentinel.
Timeline
- Commercial change documented
standalone subscriptions end; named Defender Threat Intelligence capabilities are available through the Defender portal at no additional charge for qualifying Microsoft Defender or Sentinel customers.
Official sources
- Standalone Microsoft Defender Threat Intelligence SKU retiresMicrosoft · 2026-08-01 · Official commercial, product or partner-program documentation