Access & Security

Defender Plans

StratoLens inventories the Microsoft Defender for Cloud plans on every subscription at each scan, shows what each paid plan is costing, and compares any two scans to show what changed.

Start free trial Request a demo

StratoLens is a self-hosted Azure visibility platform. It runs in your own tenant; your infrastructure data never leaves it.

The Problem

Defender for Cloud plans are set per subscription, and the Azure Portal shows them one subscription at a time:

No single view: Finding out which plans are on, which add-ons are configured, and what they cost means opening each subscription's Environment Settings in turn
No history: Nothing records when a plan was turned on or off
Silent billing: Retired plans can keep billing unnoticed

The Solution

Every scan records each subscription's Defender plans and keeps every past version:

One inventory: Current plans and spend for all subscriptions on one page
Paid versus included: Paid plans are kept apart from the free, always-on plans
Plan changes: A second page compares two scans and lists every plan that was added, removed or changed, down to individual add-on settings

From the product

Inside Defender Plans

StratoLens Defender Plans page listing Azure subscriptions with paid plan and add-on count badges and month-to-date Defender spend, with one subscription's plan cards for Azure SQL Databases, Defender CSPM, Key Vault, Servers and Storage open — Every subscription's Defender plans on one page, with this month's and last month's Defender spend on each subscription and each paid plan. Shown with demo-environment data.

Two scans compared: Sensitive Data Discovery was turned on for Defender for Storage on this subscription.

Benefits

Key benefits

See Defender coverage across all subscriptions on one screen, without the Azure Portal

Separate paid plans from the free, always-on plans

Match each paid plan to its actual charges this month and last month

Catch retired plans that are still on and still billing

Get an alert and an audit trail when someone changes a plan

Self-hosted

Runs in your tenant. Reads everything, changes nothing.

StratoLens deploys from the Azure Marketplace into your own tenant and scans your subscriptions over read-only Azure APIs. The data behind Defender Plans is collected and stored inside your tenant; there is no StratoLens cloud holding a copy.

Read-only scans via Azure management APIs
Every scan at rest in your tenant, never a vendor cloud
Deployed from the Azure Marketplace in under 15 minutes

Learn more about data residency and security architecture

Want the details?

Explore our documentation to see how Defender Plans works in detail.

Read Documentation View All Features

Start your 14-day free trial

Every feature unlocked. Deploys to your Azure tenant. No data leaves your tenant.

When the 14 days end, billing starts on your Azure invoice at your tier. One toggle in Settings turns it off, any time.

Start free trial

Request a demo

Not ready to install anything? Browse the Azure Footguns Database: 97 documented ways Azure quietly costs money or creates risk.