Read as
Last updated: April 29, 2026
Azure security tools have free and paid tiers. Wrong choice = either insecure or unnecessarily expensive.
Azure security tools have free and paid tiers. Wrong choice = either insecure or unnecessarily expensive.
The price-conscious choices
- Defender for Cloud free tier — covers basic CSPM. Standard tier for cloud workload protection.
- Sentinel pricing — per GB ingested. Tune ingestion; archive low-value data.
- Log Analytics retention — first 90 days included; longer extra. Consider archive tier for compliance retention.
- Defender for Endpoint — per device per month. Auto-provision via Intune.
- Conditional Access — included in Entra ID P1; advanced features in P2.
Common mistakes
- Sentinel ingest of all Azure Activity (lots) without filtering
- Defender for Cloud Standard on every subscription instead of risk-tiered
- Storage logs at default retention (30 days) when 90+ needed for forensics
🧠
Check your understanding
Module Quiz · 6 questions
Pass with 80%+ to mark this module complete. Unlimited retries. Each question shows an explanation.
Want this for your team?
Custom team training + practitioner advisory
Beyond the free academy — we run private workshops, vCISO advisory, and red-team exercises tailored to your stack. For Indian SMBs scaling past their first hire.
Book team training call
Replies in 4 working hrs · India-only · Senior consultants