US BUYING RESEARCH · FACTUAL COMPARISON

Endpoint security for US small businesses: compare protection and plan limits

Start with the laptops, desktops and phones your business actually uses. These four supplier families offer business endpoint protection, but prevention, investigation and managed response are different purchases. The table compares eight documented offers or configurations without assigning a performance score.

Sources checked 2026-11-04 · 4 supplier families · 8 documented offers · Non-exhaustive selection

Ratings pending. Listed by buying approach, not score. Our editorial scale is /100; these products have not been assigned a rating.

Start with the work you need done

Which approach fits your team?
Supplier	Approach	Useful when	Important boundary
Microsoft Defender for Business	Per-user endpoint protection or broader Microsoft 365 bundle	An organisation with at most 300 users wants endpoint protection or already uses Business Premium.	Five-device entitlement is per licensed user, not an unlimited fleet. Server licences and exact OS-feature parity need checking.
CrowdStrike Falcon	Device-priced prevention; Enterprise adds EDR and hunting	A business wants explicit device-priced prevention, with a path to an EDR and hunting package.	Falcon Pro and Enterprise are different module bundles. Express Support and threat hunting do not establish a fully outsourced response contract.
Bitdefender GravityZone	Small-business endpoint suite with separately selected controls	A small fleet wants centrally managed prevention and a configuration that adds only required controls.	Two rows represent the base and a documented add-on configuration, not two invented tariff tiers. Neither configured total was retrieved.
Avast Business	Endpoint suite; Ultimate adds managed Windows patching	A Windows/Mac small business wants basic protection or managed Windows patching in a named package.	Mobile Security has been removed from these subscriptions. Some components need Business Hub and are unavailable on macOS.

Build a US fleet brief before comparing prices

Count people, computers, phones and servers separately. Microsoft’s small-business licence is user-based with a 300-user ceiling; CrowdStrike’s observed offers are device-priced. A server, an outsourced response team or an add-on may need another purchase. None of these comparisons establishes regulatory compliance or measured protection efficacy.

Microsoft Defender for Business — US offers · Microsoft Defender for Business — documented scope · CrowdStrike purchasing and support FAQ

Which purchase question changes the shortlist?

Which purchase question changes the shortlist?
Your question	What the evidence supports	Boundary to verify
Already paying for Microsoft 365 Business Premium?	Check the existing Defender for Business entitlement before buying a duplicate standalone subscription. Microsoft Defender for Business — documented scope	Business Premium includes Defender for Business; server coverage still needs a separate licence.
Need EDR and investigation?	Compare Microsoft’s documented EDR with Falcon Enterprise’s explicit Insight XDR module. Microsoft Defender for Business — documented scope · CrowdStrike Falcon Enterprise — US prices and modules · CrowdStrike Falcon Pro — US prices and included modules	Falcon Pro’s named included modules do not establish EDR entitlement. Do not infer it from an unmarked comparison label.
Need managed Windows patching?	Avast Ultimate documents included managed patching. Avast small-business package documentation	Business Hub is required and patching is unavailable for macOS; Essential has a separately purchased patch add-on.
Need USB and administrative web restrictions in GravityZone?	Include the Web Access and Device Control add-on in the requested configuration. Bitdefender GravityZone Small Business Security	The base page presents these controls separately; its total price did not render.

Microsoft Defender for Business: packages and boundaries

An organisation with at most 300 users wants endpoint protection or already uses Business Premium.

Check before buying: Five-device entitlement is per licensed user, not an unlimited fleet. Server licences and exact OS-feature parity need checking.

Editorial rating: pending. No /100 score has been assigned.

Microsoft Defender for Business — observed offers, 2026-11-04
Offer	Observed price and billing	Package facts and evidence
Defender for Business — annual commitment	USD 3 · user/month · annual prepaid billing · Tax basis not verified Microsoft Defender for Business — US offers · Observed 2026-11-04	Desktop operating systems: Documented Windows and macOS; verify exact supported releases. Microsoft Defender for Business — US offers · Checked 2026-11-04 Mobile device protection: Documented iOS and Android are in the documented device scope. Microsoft Defender for Business — US offers · Checked 2026-11-04 Server protection scope: Conditional Windows/Linux servers need additional server licences. Microsoft Defender for Business — documented scope · Checked 2026-11-04 Malware prevention: Documented Next-generation protection is included. Microsoft Defender for Business — documented scope · Checked 2026-11-04 Endpoint detection and investigation: Documented SMB-optimised EDR is included. Microsoft Defender for Business — documented scope · Checked 2026-11-04 Host firewall management: Conditional Simplified Windows firewall configuration is included. Microsoft Defender for Business — documented scope · Checked 2026-11-04 Vulnerability assessment: Documented Core vulnerability assessment is included; this is not patch deployment. Microsoft Defender for Business — documented scope · Checked 2026-11-04 Central policy management: Documented Central management and wizard-based configuration. Microsoft Defender for Business — documented scope · Checked 2026-11-04 Integration API: Documented APIs are included in the Defender for Business comparison. Microsoft Defender for Business — documented scope · Checked 2026-11-04 Operational reporting: Documented Monthly security summaries are included. Microsoft Defender for Business — documented scope · Checked 2026-11-04 RMM and service-provider workflow: Conditional MSP RMM/PSA and CSP Lighthouse integration are documented. Microsoft Defender for Business — documented scope · Checked 2026-11-04 Organisation and fleet eligibility: Documented Designed for organisations with up to 300 users. Microsoft Defender for Business — US offers · Checked 2026-11-04 User versus device licensing: Documented Up to five eligible devices per licensed user; no minimum device requirement. Microsoft Defender for Business — US offers · Checked 2026-11-04 Billing commitment and renewal: Documented Observed rate requires annual payment and an auto-renewing subscription. Microsoft Defender for Business — US offers · Checked 2026-11-04 Observed tariff or quote route: Documented Standalone US page shows 3 dollars per user/month, paid yearly. Microsoft Defender for Business — US offers · Checked 2026-11-04 Machine-learning detection: Documented AI-based endpoint detection is documented; no measured accuracy is claimed. Microsoft Defender for Business — US offers · Checked 2026-11-04 Automated investigation or remediation: Documented Automated investigation/remediation and attack disruption are included. Microsoft Defender for Business — documented scope · Checked 2026-11-04 Not verified for this offer Ransomware controls Fileless attack controls Exploit mitigation Host isolation Web-content policy Removable-device control Software patch deployment SIEM export and integration Identity and device-management integration Tax treatment Support service scope Generative assistant entitlement Human control of AI actions
Microsoft 365 Business Premium with Teams — annual commitment	USD 22 · user/month · annual prepaid billing · Tax basis not verified Microsoft Defender for Business — US offers · Observed 2026-11-04	Desktop operating systems: Documented Windows and macOS; verify exact supported releases. Microsoft Defender for Business — US offers · Microsoft Defender for Business — documented scope · Checked 2026-11-04 Mobile device protection: Documented iOS and Android are in the documented device scope. Microsoft Defender for Business — US offers · Microsoft Defender for Business — documented scope · Checked 2026-11-04 Server protection scope: Conditional Windows/Linux servers need additional server licences. Microsoft Defender for Business — documented scope · Checked 2026-11-04 Malware prevention: Documented Next-generation protection is included. Microsoft Defender for Business — documented scope · Checked 2026-11-04 Endpoint detection and investigation: Documented SMB-optimised EDR is included. Microsoft Defender for Business — documented scope · Checked 2026-11-04 Host firewall management: Conditional Simplified Windows firewall configuration is included. Microsoft Defender for Business — documented scope · Checked 2026-11-04 Vulnerability assessment: Documented Core vulnerability assessment is included; this is not patch deployment. Microsoft Defender for Business — documented scope · Checked 2026-11-04 Central policy management: Documented Central management and wizard-based configuration. Microsoft Defender for Business — documented scope · Checked 2026-11-04 Integration API: Documented APIs are included in the Defender for Business comparison. Microsoft Defender for Business — documented scope · Checked 2026-11-04 Operational reporting: Documented Monthly security summaries are included. Microsoft Defender for Business — documented scope · Checked 2026-11-04 RMM and service-provider workflow: Conditional MSP RMM/PSA and CSP Lighthouse integration are documented. Microsoft Defender for Business — documented scope · Checked 2026-11-04 Organisation and fleet eligibility: Documented Designed for organisations with up to 300 users. Microsoft Defender for Business — US offers · Microsoft Defender for Business — documented scope · Checked 2026-11-04 User versus device licensing: Documented Up to five eligible devices per licensed user; no minimum device requirement. Microsoft Defender for Business — US offers · Microsoft Defender for Business — documented scope · Checked 2026-11-04 Billing commitment and renewal: Documented Observed rate requires annual payment and an auto-renewing subscription. Microsoft Defender for Business — US offers · Microsoft Defender for Business — documented scope · Checked 2026-11-04 Observed tariff or quote route: Documented Business Premium with Teams shows 22 dollars per user/month paid yearly. Microsoft Defender for Business — US offers · Microsoft Defender for Business — documented scope · Checked 2026-11-04 Machine-learning detection: Documented AI-based endpoint detection is documented; no measured accuracy is claimed. Microsoft Defender for Business — US offers · Microsoft Defender for Business — documented scope · Checked 2026-11-04 Automated investigation or remediation: Documented Automated investigation/remediation and attack disruption are included. Microsoft Defender for Business — documented scope · Checked 2026-11-04 Identity and device-management integration: Documented Business Premium includes Intune P1 and Entra identity/access features. Microsoft Defender for Business — US offers · Checked 2026-11-04 Not verified for this offer Ransomware controls Fileless attack controls Exploit mitigation Host isolation Web-content policy Removable-device control Software patch deployment SIEM export and integration Tax treatment Support service scope Generative assistant entitlement Human control of AI actions

The observed standalone rate is USD 3 per user/month paid yearly; Business Premium with Teams is USD 22 on the same basis. A separate no-Teams offer exists but is not this row.
Business Premium adds Intune P1 and identity/email/productivity scope; buying the larger bundle solely for endpoint protection requires a separate value decision.
Sales tax, response SLA, log retention, data location and additional generative AI entitlements remain unverified for the selected order.

Microsoft Defender for Business product-wide documentation — not a plan entitlement

These product statements do not fill gaps in the package table above.

Desktop operating systems: Documented
Windows and macOS; verify exact supported releases.
Microsoft Defender for Business — US offers · Checked 2026-11-04
Mobile device protection: Documented
iOS and Android are in the documented device scope.
Microsoft Defender for Business — US offers · Checked 2026-11-04
Server protection scope: Conditional
Windows/Linux servers need additional server licences.
Microsoft Defender for Business — documented scope · Checked 2026-11-04
Malware prevention: Documented
Next-generation protection is included.
Microsoft Defender for Business — documented scope · Checked 2026-11-04
Endpoint detection and investigation: Documented
SMB-optimised EDR is included.
Microsoft Defender for Business — documented scope · Checked 2026-11-04
Host firewall management: Conditional
Simplified Windows firewall configuration is included.
Microsoft Defender for Business — documented scope · Checked 2026-11-04
Vulnerability assessment: Documented
Core vulnerability assessment is included; this is not patch deployment.
Microsoft Defender for Business — documented scope · Checked 2026-11-04
Central policy management: Documented
Central management and wizard-based configuration.
Microsoft Defender for Business — documented scope · Checked 2026-11-04
Integration API: Documented
APIs are included in the Defender for Business comparison.
Microsoft Defender for Business — documented scope · Checked 2026-11-04
Operational reporting: Documented
Monthly security summaries are included.
Microsoft Defender for Business — documented scope · Checked 2026-11-04
RMM and service-provider workflow: Conditional
MSP RMM/PSA and CSP Lighthouse integration are documented.
Microsoft Defender for Business — documented scope · Checked 2026-11-04
Organisation and fleet eligibility: Documented
Designed for organisations with up to 300 users.
Microsoft Defender for Business — US offers · Checked 2026-11-04
User versus device licensing: Documented
Up to five eligible devices per licensed user; no minimum device requirement.
Microsoft Defender for Business — US offers · Checked 2026-11-04
Billing commitment and renewal: Documented
Observed rate requires annual payment and an auto-renewing subscription.
Microsoft Defender for Business — US offers · Checked 2026-11-04
Observed tariff or quote route: Documented
Standalone US page shows 3 dollars per user/month, paid yearly.
Microsoft Defender for Business — US offers · Checked 2026-11-04
Machine-learning detection: Documented
AI-based endpoint detection is documented; no measured accuracy is claimed.
Microsoft Defender for Business — US offers · Checked 2026-11-04
Automated investigation or remediation: Documented
Automated investigation/remediation and attack disruption are included.
Microsoft Defender for Business — documented scope · Checked 2026-11-04

Still unverified

Ransomware controls
Fileless attack controls
Exploit mitigation
Host isolation
Web-content policy
Removable-device control
Software patch deployment
SIEM export and integration
Identity and device-management integration
Tax treatment
Support service scope
Generative assistant entitlement
Human control of AI actions

CrowdStrike Falcon: packages and boundaries

A business wants explicit device-priced prevention, with a path to an EDR and hunting package.

Check before buying: Falcon Pro and Enterprise are different module bundles. Express Support and threat hunting do not establish a fully outsourced response contract.

Editorial rating: pending. No /100 score has been assigned.

CrowdStrike Falcon — observed offers, 2026-11-04
Offer	Observed price and billing	Package facts and evidence
Falcon Pro — annual	USD 99.99 · device/year · annual billing · Tax basis not verified CrowdStrike Falcon Pro — US prices and included modules · Observed 2026-11-04	Malware prevention: Documented Falcon Prevent is an included Pro module. CrowdStrike Falcon Pro — US prices and included modules · Checked 2026-11-04 Ransomware controls: Documented Prevention module addresses ransomware; this is not a recovery guarantee. CrowdStrike Falcon Pro — US prices and included modules · Checked 2026-11-04 Mobile device protection: Documented Falcon for Mobile covers Android and iOS. CrowdStrike Falcon Pro — US prices and included modules · Checked 2026-11-04 Removable-device control: Documented USB visibility/control is included. CrowdStrike Falcon Pro — US prices and included modules · Checked 2026-11-04 Host firewall management: Documented Central host firewall policy is included. CrowdStrike Falcon Pro — US prices and included modules · Checked 2026-11-04 Central policy management: Documented Central policy enforcement is documented for Pro. CrowdStrike Falcon Pro — US prices and included modules · Checked 2026-11-04 User versus device licensing: Documented Charged per protected device. CrowdStrike Falcon Pro — US prices and included modules · Checked 2026-11-04 Observed tariff or quote route: Documented Pro annual rate is USD 99.99/device; monthly option is USD 14.99. CrowdStrike Falcon Pro — US prices and included modules · Checked 2026-11-04 Billing commitment and renewal: Documented Annual billing is prepaid; monthly billing is a separate offer. CrowdStrike purchasing and support FAQ · Checked 2026-11-04 Support service scope: Documented Express Support is included; exact response SLA not established. CrowdStrike purchasing and support FAQ · Checked 2026-11-04 Desktop operating systems: Conditional Platform supports Windows, macOS and Linux; confirm versions/modules before buying. CrowdStrike purchasing and support FAQ · Checked 2026-11-04 Not verified for this offer Server protection scope Fileless attack controls Exploit mitigation Endpoint detection and investigation Host isolation Web-content policy Vulnerability assessment Software patch deployment RMM and service-provider workflow Integration API SIEM export and integration Identity and device-management integration Operational reporting Organisation and fleet eligibility Tax treatment Machine-learning detection Automated investigation or remediation Generative assistant entitlement Human control of AI actions
Falcon Enterprise — annual	USD 184.99 · device/year · annual billing · Tax basis not verified CrowdStrike Falcon Enterprise — US prices and modules · Observed 2026-11-04	Malware prevention: Documented Falcon Prevent is an included Pro module. CrowdStrike Falcon Enterprise — US prices and modules · Checked 2026-11-04 Ransomware controls: Documented Prevention module addresses ransomware; this is not a recovery guarantee. CrowdStrike Falcon Enterprise — US prices and modules · Checked 2026-11-04 Mobile device protection: Documented Falcon for Mobile covers Android and iOS. CrowdStrike Falcon Enterprise — US prices and modules · Checked 2026-11-04 Removable-device control: Documented USB visibility/control is included. CrowdStrike Falcon Enterprise — US prices and modules · Checked 2026-11-04 Host firewall management: Documented Central host firewall policy is included. CrowdStrike Falcon Enterprise — US prices and modules · Checked 2026-11-04 Central policy management: Documented Central policy enforcement is documented for Pro. CrowdStrike Falcon Enterprise — US prices and modules · Checked 2026-11-04 User versus device licensing: Documented Charged per protected device. CrowdStrike Falcon Enterprise — US prices and modules · Checked 2026-11-04 Observed tariff or quote route: Documented Enterprise annual rate is USD 184.99/device; monthly option is USD 19.99. CrowdStrike Falcon Enterprise — US prices and modules · Checked 2026-11-04 Billing commitment and renewal: Documented Annual billing is prepaid; monthly billing is a separate offer. CrowdStrike purchasing and support FAQ · Checked 2026-11-04 Support service scope: Documented Express Support is included; exact response SLA not established. CrowdStrike purchasing and support FAQ · Checked 2026-11-04 Desktop operating systems: Conditional Platform supports Windows, macOS and Linux; confirm versions/modules before buying. CrowdStrike purchasing and support FAQ · Checked 2026-11-04 Endpoint detection and investigation: Documented Falcon Insight XDR is an explicitly included module. CrowdStrike Falcon Enterprise — US prices and modules · Checked 2026-11-04 Fileless attack controls: Documented Falcon Prevent describes fileless attack prevention. CrowdStrike Falcon Enterprise — US prices and modules · Checked 2026-11-04 Machine-learning detection: Documented AI indicators of attack are documented; no independent detection test performed. CrowdStrike Falcon Enterprise — US prices and modules · Checked 2026-11-04 Not verified for this offer Server protection scope Exploit mitigation Host isolation Web-content policy Vulnerability assessment Software patch deployment RMM and service-provider workflow Integration API SIEM export and integration Identity and device-management integration Operational reporting Organisation and fleet eligibility Tax treatment Automated investigation or remediation Generative assistant entitlement Human control of AI actions

Pro annual billing is USD 99.99 per device; its monthly option is USD 14.99. Enterprise annual billing is USD 184.99; monthly is USD 19.99.
The Enterprise page explicitly includes Insight XDR and Adversary OverWatch. Pro EDR rights were not established.
Confirm taxes, servers, OS versions, data retention, response responsibilities and additional module costs in the order.

CrowdStrike Falcon product-wide documentation — not a plan entitlement

These product statements do not fill gaps in the package table above.

Malware prevention: Documented
Falcon Prevent is an included Pro module.
CrowdStrike Falcon Enterprise — US prices and modules · Checked 2026-11-04
Ransomware controls: Documented
Prevention module addresses ransomware; this is not a recovery guarantee.
CrowdStrike Falcon Enterprise — US prices and modules · Checked 2026-11-04
Mobile device protection: Documented
Falcon for Mobile covers Android and iOS.
CrowdStrike Falcon Enterprise — US prices and modules · Checked 2026-11-04
Removable-device control: Documented
USB visibility/control is included.
CrowdStrike Falcon Enterprise — US prices and modules · Checked 2026-11-04
Host firewall management: Documented
Central host firewall policy is included.
CrowdStrike Falcon Enterprise — US prices and modules · Checked 2026-11-04
Central policy management: Documented
Central policy enforcement is documented for Pro.
CrowdStrike Falcon Enterprise — US prices and modules · Checked 2026-11-04
User versus device licensing: Documented
Charged per protected device.
CrowdStrike Falcon Enterprise — US prices and modules · Checked 2026-11-04
Observed tariff or quote route: Documented
Enterprise annual rate is USD 184.99/device; monthly option is USD 19.99.
CrowdStrike Falcon Enterprise — US prices and modules · Checked 2026-11-04
Billing commitment and renewal: Documented
Annual billing is prepaid; monthly billing is a separate offer.
CrowdStrike purchasing and support FAQ · Checked 2026-11-04
Support service scope: Documented
Express Support is included; exact response SLA not established.
CrowdStrike purchasing and support FAQ · Checked 2026-11-04
Desktop operating systems: Conditional
Platform supports Windows, macOS and Linux; confirm versions/modules before buying.
CrowdStrike purchasing and support FAQ · Checked 2026-11-04
Endpoint detection and investigation: Documented
Falcon Insight XDR is an explicitly included module.
CrowdStrike Falcon Enterprise — US prices and modules · Checked 2026-11-04
Fileless attack controls: Documented
Falcon Prevent describes fileless attack prevention.
CrowdStrike Falcon Enterprise — US prices and modules · Checked 2026-11-04
Machine-learning detection: Documented
AI indicators of attack are documented; no independent detection test performed.
CrowdStrike Falcon Enterprise — US prices and modules · Checked 2026-11-04

Still unverified

Server protection scope
Exploit mitigation
Host isolation
Web-content policy
Vulnerability assessment
Software patch deployment
RMM and service-provider workflow
Integration API
SIEM export and integration
Identity and device-management integration
Operational reporting
Organisation and fleet eligibility
Tax treatment
Automated investigation or remediation
Generative assistant entitlement
Human control of AI actions

Bitdefender GravityZone: packages and boundaries

A small fleet wants centrally managed prevention and a configuration that adds only required controls.

Check before buying: Two rows represent the base and a documented add-on configuration, not two invented tariff tiers. Neither configured total was retrieved.

Editorial rating: pending. No /100 score has been assigned.

Bitdefender GravityZone — observed offers, 2026-11-04
Offer	Observed price and billing	Package facts and evidence
GravityZone Small Business Security — base	Price not verified · selected device configuration · selected term unverified billing · Applicable taxes extra Bitdefender GravityZone Small Business Security · Observed 2026-11-04	Malware prevention: Documented Layered prevention and quarantine are documented for Small Business Security. Bitdefender GravityZone Small Business Security · Checked 2026-11-04 Ransomware controls: Documented Ransomware mitigation can restore affected files from its protective copies; not general backup. Bitdefender GravityZone Small Business Security · Checked 2026-11-04 Fileless attack controls: Documented Fileless protection is enabled by default; Windows AMSI integration is described. Bitdefender GravityZone Small Business Security · Checked 2026-11-04 Exploit mitigation: Documented Anti-exploit controls are documented for applications and system processes. Bitdefender GravityZone Small Business Security · Checked 2026-11-04 Central policy management: Documented Cloud-based central management. Bitdefender GravityZone Small Business Security · Checked 2026-11-04 Organisation and fleet eligibility: Documented Displayed configurable scope is 1–100 laptops, desktops and file servers. Bitdefender GravityZone Small Business Security · Checked 2026-11-04 User versus device licensing: Documented The purchase configurator counts devices and years. Bitdefender GravityZone Small Business Security · Checked 2026-11-04 Tax treatment: Documented The configurator states taxes are not included. Bitdefender GravityZone Small Business Security · Checked 2026-11-04 Machine-learning detection: Documented Machine learning and behavioural analysis are described. Bitdefender GravityZone Small Business Security · Checked 2026-11-04 Automated investigation or remediation: Documented Documented automatic actions include process termination and quarantine. Bitdefender GravityZone Small Business Security · Checked 2026-11-04 Removable-device control: Conditional Web Access and Device Control requires an add-on. Bitdefender GravityZone Small Business Security · Checked 2026-11-04 Web-content policy: Conditional Administrative web restrictions require the Web Access and Device Control add-on. Bitdefender GravityZone Small Business Security · Checked 2026-11-04 Vulnerability assessment: Conditional Network Attack Defense and Risk Management is a separate add-on. Bitdefender GravityZone Small Business Security · Checked 2026-11-04 Not verified for this offer Desktop operating systems Server protection scope Mobile device protection Endpoint detection and investigation Host isolation Host firewall management Software patch deployment RMM and service-provider workflow Integration API SIEM export and integration Identity and device-management integration Operational reporting Billing commitment and renewal Observed tariff or quote route Support service scope Generative assistant entitlement Human control of AI actions
Small Business Security + Web Access and Device Control	Price not verified · base plus selected add-on · selected term unverified billing · Applicable taxes extra Bitdefender GravityZone Small Business Security · Observed 2026-11-04	Malware prevention: Documented Layered prevention and quarantine are documented for Small Business Security. Bitdefender GravityZone Small Business Security · Checked 2026-11-04 Ransomware controls: Documented Ransomware mitigation can restore affected files from its protective copies; not general backup. Bitdefender GravityZone Small Business Security · Checked 2026-11-04 Fileless attack controls: Documented Fileless protection is enabled by default; Windows AMSI integration is described. Bitdefender GravityZone Small Business Security · Checked 2026-11-04 Exploit mitigation: Documented Anti-exploit controls are documented for applications and system processes. Bitdefender GravityZone Small Business Security · Checked 2026-11-04 Central policy management: Documented Cloud-based central management. Bitdefender GravityZone Small Business Security · Checked 2026-11-04 Organisation and fleet eligibility: Documented Displayed configurable scope is 1–100 laptops, desktops and file servers. Bitdefender GravityZone Small Business Security · Checked 2026-11-04 User versus device licensing: Documented The purchase configurator counts devices and years. Bitdefender GravityZone Small Business Security · Checked 2026-11-04 Tax treatment: Documented The configurator states taxes are not included. Bitdefender GravityZone Small Business Security · Checked 2026-11-04 Machine-learning detection: Documented Machine learning and behavioural analysis are described. Bitdefender GravityZone Small Business Security · Checked 2026-11-04 Automated investigation or remediation: Documented Documented automatic actions include process termination and quarantine. Bitdefender GravityZone Small Business Security · Checked 2026-11-04 Removable-device control: Documented This configured offer includes the separately selected Web Access and Device Control add-on. Bitdefender GravityZone Small Business Security · Checked 2026-11-04 Web-content policy: Documented This configured offer includes the separately selected Web Access and Device Control add-on. Bitdefender GravityZone Small Business Security · Checked 2026-11-04 Vulnerability assessment: Conditional Network Attack Defense and Risk Management is a separate add-on. Bitdefender GravityZone Small Business Security · Checked 2026-11-04 Not verified for this offer Desktop operating systems Server protection scope Mobile device protection Endpoint detection and investigation Host isolation Host firewall management Software patch deployment RMM and service-provider workflow Integration API SIEM export and integration Identity and device-management integration Operational reporting Billing commitment and renewal Observed tariff or quote route Support service scope Generative assistant entitlement Human control of AI actions

The configurator covers 1–100 devices and explicitly excludes taxes. Do not replace its missing amount with a consumer or reseller tariff.
Web Access and Device Control is a separate add-on; Network Attack Defense and Risk Management is another separate scope.
Its protective ransomware rollback copies are not a substitute for a tested general backup strategy. EDR, patching and OS-specific parity need their own confirmation.

Bitdefender GravityZone product-wide documentation — not a plan entitlement

These product statements do not fill gaps in the package table above.

Malware prevention: Documented
Layered prevention and quarantine are documented for Small Business Security.
Bitdefender GravityZone Small Business Security · Checked 2026-11-04
Ransomware controls: Documented
Ransomware mitigation can restore affected files from its protective copies; not general backup.
Bitdefender GravityZone Small Business Security · Checked 2026-11-04
Fileless attack controls: Documented
Fileless protection is enabled by default; Windows AMSI integration is described.
Bitdefender GravityZone Small Business Security · Checked 2026-11-04
Exploit mitigation: Documented
Anti-exploit controls are documented for applications and system processes.
Bitdefender GravityZone Small Business Security · Checked 2026-11-04
Central policy management: Documented
Cloud-based central management.
Bitdefender GravityZone Small Business Security · Checked 2026-11-04
Organisation and fleet eligibility: Documented
Displayed configurable scope is 1–100 laptops, desktops and file servers.
Bitdefender GravityZone Small Business Security · Checked 2026-11-04
User versus device licensing: Documented
The purchase configurator counts devices and years.
Bitdefender GravityZone Small Business Security · Checked 2026-11-04
Tax treatment: Documented
The configurator states taxes are not included.
Bitdefender GravityZone Small Business Security · Checked 2026-11-04
Machine-learning detection: Documented
Machine learning and behavioural analysis are described.
Bitdefender GravityZone Small Business Security · Checked 2026-11-04
Automated investigation or remediation: Documented
Documented automatic actions include process termination and quarantine.
Bitdefender GravityZone Small Business Security · Checked 2026-11-04
Removable-device control: Conditional
Web Access and Device Control requires an add-on.
Bitdefender GravityZone Small Business Security · Checked 2026-11-04
Web-content policy: Conditional
Administrative web restrictions require the Web Access and Device Control add-on.
Bitdefender GravityZone Small Business Security · Checked 2026-11-04
Vulnerability assessment: Conditional
Network Attack Defense and Risk Management is a separate add-on.
Bitdefender GravityZone Small Business Security · Checked 2026-11-04

Still unverified

Desktop operating systems
Server protection scope
Mobile device protection
Endpoint detection and investigation
Host isolation
Host firewall management
Software patch deployment
RMM and service-provider workflow
Integration API
SIEM export and integration
Identity and device-management integration
Operational reporting
Billing commitment and renewal
Observed tariff or quote route
Support service scope
Generative assistant entitlement
Human control of AI actions

Avast Business: packages and boundaries

A Windows/Mac small business wants basic protection or managed Windows patching in a named package.

Check before buying: Mobile Security has been removed from these subscriptions. Some components need Business Hub and are unavailable on macOS.

Editorial rating: pending. No /100 score has been assigned.

Avast Business — observed offers, 2026-11-04
Offer	Observed price and billing	Package facts and evidence
Essential Business Security — observed introductory offer	$31.37 (currency not verified) · device/first year · first year billing · VAT excluded; US sales tax not verified · Displayed renewal $39.21/device/year; exact device-selection minimum unresolved. Avast US business store · Observed 2026-11-04	Desktop operating systems: Documented Endpoint protection supports Windows and macOS; components differ. Avast small-business package documentation · Checked 2026-11-04 Server protection scope: Documented Windows Server protection is documented. Avast small-business package documentation · Checked 2026-11-04 Mobile device protection: Not included Mobile Security was removed from Small Business Solutions subscriptions. Avast small-business package documentation · Checked 2026-11-04 Malware prevention: Documented Endpoint antivirus is included in Essential and Ultimate. Avast small-business package documentation · Checked 2026-11-04 Ransomware controls: Documented Ransomware/data-breach protection is in both packages. Avast small-business package documentation · Checked 2026-11-04 Host firewall management: Conditional Firewall is listed among endpoint protection components; OS-specific scope must be checked. Avast small-business package documentation · Checked 2026-11-04 Central policy management: Documented Business Hub is available; Essential can also be installed unmanaged. Avast small-business package documentation · Checked 2026-11-04 Operational reporting: Documented Business Hub supplies reporting, alerts and device/policy administration. Avast small-business package documentation · Checked 2026-11-04 Support service scope: Documented IT Support is included; exact US hours/SLA not confirmed. Avast small-business package documentation · Checked 2026-11-04 Removable-device control: Not included Essential excludes USB Protection; higher-tier entitlement requires Business Hub. Avast small-business package documentation · Checked 2026-11-04 Web-content policy: Not included Essential does not include Web Control. Avast small-business package documentation · Checked 2026-11-04 Software patch deployment: Conditional Essential can buy Patch Management separately; unavailable on macOS. Avast small-business package documentation · Checked 2026-11-04 Observed tariff or quote route: Documented Observed Essential intro is $31.37/device for the first year; displayed renewal $39.21. Avast US business store · Checked 2026-11-04 Tax treatment: Conditional Price excludes VAT; applicable US sales-tax treatment was not established. Avast US business store · Checked 2026-11-04 Not verified for this offer Fileless attack controls Exploit mitigation Endpoint detection and investigation Host isolation Vulnerability assessment RMM and service-provider workflow Integration API SIEM export and integration Identity and device-management integration Organisation and fleet eligibility User versus device licensing Billing commitment and renewal Machine-learning detection Automated investigation or remediation Generative assistant entitlement Human control of AI actions
Ultimate Business Security — observed introductory offer	$48.33 (currency not verified) · device/first year · first year billing · VAT excluded; US sales tax not verified · Displayed renewal $60.41/device/year; exact device-selection minimum unresolved. Avast US business store · Observed 2026-11-04	Desktop operating systems: Documented Endpoint protection supports Windows and macOS; components differ. Avast small-business package documentation · Checked 2026-11-04 Server protection scope: Documented Windows Server protection is documented. Avast small-business package documentation · Checked 2026-11-04 Mobile device protection: Not included Mobile Security was removed from Small Business Solutions subscriptions. Avast small-business package documentation · Checked 2026-11-04 Malware prevention: Documented Endpoint antivirus is included in Essential and Ultimate. Avast small-business package documentation · Checked 2026-11-04 Ransomware controls: Documented Ransomware/data-breach protection is in both packages. Avast small-business package documentation · Checked 2026-11-04 Host firewall management: Conditional Firewall is listed among endpoint protection components; OS-specific scope must be checked. Avast small-business package documentation · Checked 2026-11-04 Central policy management: Documented Business Hub is required for Ultimate because patching is a managed service. Avast small-business package documentation · Checked 2026-11-04 Operational reporting: Documented Business Hub supplies reporting, alerts and device/policy administration. Avast small-business package documentation · Checked 2026-11-04 Support service scope: Documented IT Support is included; exact US hours/SLA not confirmed. Avast small-business package documentation · Checked 2026-11-04 Removable-device control: Documented USB Protection is included, configured through Business Hub. Avast small-business package documentation · Checked 2026-11-04 Web-content policy: Documented Web Control is included, configured through Business Hub. Avast small-business package documentation · Checked 2026-11-04 Software patch deployment: Conditional Patch Management is included for Windows; unavailable on macOS. Avast small-business package documentation · Checked 2026-11-04 Observed tariff or quote route: Documented Observed Ultimate intro is $48.33/device for the first year; displayed renewal $60.41. Avast US business store · Checked 2026-11-04 Tax treatment: Conditional Price excludes VAT; applicable US sales-tax treatment was not established. Avast US business store · Checked 2026-11-04 Not verified for this offer Fileless attack controls Exploit mitigation Endpoint detection and investigation Host isolation Vulnerability assessment RMM and service-provider workflow Integration API SIEM export and integration Identity and device-management integration Organisation and fleet eligibility User versus device licensing Billing commitment and renewal Machine-learning detection Automated investigation or remediation Generative assistant entitlement Human control of AI actions

Observed Essential introduction: $31.37 per device for the first year; displayed renewal: $39.21/year. Ultimate: $48.33 initially, displayed renewal $60.41/year.
The US store showed an unresolved “3x de” selector label. Confirm actual quantity, ISO currency and order total; these observations do not establish a minimum purchase.
VAT is excluded on the page; US sales tax was not established. The observed promotions are not a guarantee of future renewal rates.

Avast Business product-wide documentation — not a plan entitlement

These product statements do not fill gaps in the package table above.

Desktop operating systems: Documented
Endpoint protection supports Windows and macOS; components differ.
Avast small-business package documentation · Checked 2026-11-04
Server protection scope: Documented
Windows Server protection is documented.
Avast small-business package documentation · Checked 2026-11-04
Mobile device protection: Not included
Mobile Security was removed from Small Business Solutions subscriptions.
Avast small-business package documentation · Checked 2026-11-04
Malware prevention: Documented
Endpoint antivirus is included in Essential and Ultimate.
Avast small-business package documentation · Checked 2026-11-04
Ransomware controls: Documented
Ransomware/data-breach protection is in both packages.
Avast small-business package documentation · Checked 2026-11-04
Host firewall management: Conditional
Firewall is listed among endpoint protection components; OS-specific scope must be checked.
Avast small-business package documentation · Checked 2026-11-04
Central policy management: Documented
Business Hub is required for Ultimate because patching is a managed service.
Avast small-business package documentation · Checked 2026-11-04
Operational reporting: Documented
Business Hub supplies reporting, alerts and device/policy administration.
Avast small-business package documentation · Checked 2026-11-04
Support service scope: Documented
IT Support is included; exact US hours/SLA not confirmed.
Avast small-business package documentation · Checked 2026-11-04
Removable-device control: Documented
USB Protection is included, configured through Business Hub.
Avast small-business package documentation · Checked 2026-11-04
Web-content policy: Documented
Web Control is included, configured through Business Hub.
Avast small-business package documentation · Checked 2026-11-04
Software patch deployment: Conditional
Patch Management is included for Windows; unavailable on macOS.
Avast small-business package documentation · Checked 2026-11-04
Observed tariff or quote route: Documented
Observed Ultimate intro is $48.33/device for the first year; displayed renewal $60.41.
Avast US business store · Checked 2026-11-04
Tax treatment: Conditional
Price excludes VAT; applicable US sales-tax treatment was not established.
Avast US business store · Checked 2026-11-04

Still unverified

Fileless attack controls
Exploit mitigation
Endpoint detection and investigation
Host isolation
Vulnerability assessment
RMM and service-provider workflow
Integration API
SIEM export and integration
Identity and device-management integration
Organisation and fleet eligibility
User versus device licensing
Billing commitment and renewal
Machine-learning detection
Automated investigation or remediation
Generative assistant entitlement
Human control of AI actions

A short buying sequence that exposes the real scope

An annual prepaid rate is not a cancellable monthly offer. The observed Microsoft amounts are monthly equivalents paid yearly; CrowdStrike’s annual amount is per device per year. Avast’s first-year amount and displayed renewal differ, and the extracted device selector and currency need confirmation. Bitdefender’s dynamic amount did not render. No cross-vendor cost winner is calculated.

Inventory operating-system versions, servers and mobile devices. Mark each as required, optional or outside scope; a platform logo does not establish identical feature parity on every OS.
Choose the operating model: prevention only, your IT team investigating alerts, or a contracted managed detection and response service. Name the person who responds outside office hours.
Require an offer-specific list for EDR, host isolation, vulnerability assessment, patch deployment, USB restrictions and web policy. Antivirus, threat hunting and backup are not interchangeable.
Before moving a fleet, run an authorised pilot for installation, exclusions, resource use, alert workflow, rollback and coexistence. This comparison has not executed that pilot.
Obtain the order’s exact currency, tax, renewal, seat floor, server cost, data-processing region, log retention and support response commitments. Do not treat a trial’s enabled modules as purchased entitlement.

Before you migrate

Record existing policies and exclusions, then export the inventory before changing agents.
Check the vendor’s supported coexistence and removal process; stage devices in a small group and retain a rollback procedure.
Verify which team receives and owns an alert, and check a documented response exercise before expanding the rollout.

How to evaluate AI claims

Machine learning used to detect malware is different from a generative assistant or an autonomous responder. The sources document AI detection for Microsoft, CrowdStrike and Bitdefender, but do not establish comparable accuracy, prompt limits, data reuse or human-approval controls across all purchased offers. Unknown AI cells remain unknown.

What we checked — and what we did not

System Compare compared dated public product pages, package descriptions and pricing documentation. This page was prepared with AI assistance from that evidence. No supplier account, endpoint deployment, recovery exercise, accessibility scanner or live consent configuration was tested. Supplier documentation is not independent performance evidence.

Human editorial sign-off and a final rating are not recorded. Unknown means the evidence does not settle the answer; it does not mean the feature is absent. Product-wide capabilities must not be assumed to be included in every offer.

Prices are observations, not quotations. Confirm currency, tax, usage units, renewal, setup charges and exact contract scope before purchase. No lowest-cost winner is declared across unlike workloads.

How our scoring works · Commercial transparency · Send a correction · Supplier applications

Dated primary sources

Microsoft Defender for Business — US offersChecked 2026-11-04 · Standalone and Microsoft 365 Business Premium, annual commitment
Microsoft Defender for Business — documented scopeChecked 2026-11-04 · Standalone and inclusion in Business Premium; server licences separate
CrowdStrike Falcon Pro — US prices and included modulesChecked 2026-11-04 · Pro monthly and annual USD offers
CrowdStrike Falcon Enterprise — US prices and modulesChecked 2026-11-04 · Enterprise USD offers and named included modules
CrowdStrike purchasing and support FAQChecked 2026-11-04 · Platform OS families, Express Support, billing and optional add-ons
Bitdefender GravityZone Small Business SecurityChecked 2026-11-04 · Base offer and separately selected add-ons
Avast US business storeChecked 2026-11-04 · Observed first-year and renewal amounts for displayed device configuration
Avast small-business package documentationChecked 2026-11-04 · Essential, Premium and Ultimate entitlements and OS restrictions