Microsoft Defender for Cloud Apps Platform Support

• Microsoft Defender for Cloud Apps provides oversight of cloud-based applications.
• Integration with Microsoft Defender for Endpoint will extend oversight to unmanaged Windows devices outside the organization’s network.
• The planned capability will help protect organizational data in cloud applications from bring-your-own and home devices.
• The capability increases costs for organizations that do not already have a qualifying Microsoft 365 E5 suite.

Microsoft Defender for Cloud Apps is a subscription-based Microsoft-hosted service that acts as a cloud access security broker designed to help organizations discover and control the cloud applications accessed by their users. Integration into Microsoft Defender for Endpoint enables Microsoft Defender for Cloud Apps to collect data on cloud applications accessed by Windows devices regardless of network location or cloud application type, at additional cost. 

Microsoft Defender for Cloud Apps Basics

Microsoft Defender for Cloud Apps fits in a category of services called cloud access security brokers (CASB). It is designed to help organizations discover the cloud applications accessed by their users and offers management and data loss prevention capabilities in certain scenarios. (For more details on uncontrolled access to cloud applications, see the illustration “Uncontrolled Cloud Application Access”.)