Defender Licensing for Mobile Devices

The features offered by Microsoft Defender for Endpoint on mobile devices are very limited, particularly on iOS and iPadOS. Active defense features included in Microsoft Defender for Endpoint (MDE) Plan 1 are largely limited to Web protection (anti-phishing and blocking dangerous connections) and antimalware, which is only available on Android mobile devices, not on iOS devices or iPads. (Items shown in gray are not available for that platform.) Conditional access, conditional launch, and jailbreak detection are already available with Intune. Privacy controls are less a security feature and more a regulatory compliance bar to ensure user data is protected adequately.
Plan 1 is included in Microsoft 365 E3 or licensed stand-alone.

At this time, the only additional feature offered by MDE Plan 2 on mobile devices is threat and vulnerability management, intended to help organizations discover software within their organizations that is being exploited or has a vulnerability which needs to be addressed. At this time, that feature is only available for Android, and only Android applications, not OS software.
Plan 2 (previously just named Microsoft Defender for Endpoint) is included in Microsoft 365 E5, Windows Enterprise E5, and the Microsoft 365 E5 Security suite.