On October 1, 2025, Microsoft removed Microsoft Defender Threat Intelligence (MDTI) from the Availability and Prerequisite tables in the Microsoft Product Terms. This means MDTI is no longer available as a standalone product and is not listed with specific licensing prerequisites.
Back in July 2025, Microsoft announced that MDTI is converging into Microsoft Sentinel and Microsoft Defender XDR to provide a unified security operations experience.
- MDTI is no longer offered as an individual SKU.
- Customers cannot purchase MDTI separately.
- MDTI capabilities are now integrated into Microsoft Defender XDR and Microsoft Sentinel for a more seamless security operations experience.
What is Microsoft Defender Threat Intelligence?
Microsoft Defender Threat Intelligence (MDTI) is a security service that provides organizations with insights into cyber threats. It helps identify, analyze, and respond to malicious activities by delivering threat intelligence data and reports.
Key Features
- Access to curated threat intelligence data.
- Indicators of compromise (IOCs) for proactive defense.
- Contextual analysis of threat actors and campaigns.
- Integration with Microsoft security tools for automated response.
- Now embedded in Microsoft Defender XDR and Microsoft Sentinel for unified threat detection and response.
Impact on existing Microsoft Defender Threat Intelligence customers
- No standalone purchase: MDTI cannot be purchased separately anymore.
- Transition required: Organizations using MDTI must move to Microsoft Defender XDR or Microsoft Sentinel for continued access to threat intelligence features.
- Renewals: Existing MDTI subscriptions will run until their term ends but cannot be renewed as standalone.
- Budget considerations: Customers may need to license broader security suites, which could increase costs but also provide additional security capabilities.
- Operational continuity: No immediate feature loss, however planning for integration into new platforms is essential.
Licensing
- Before October 1, 2025: MDTI was available as a standalone product with defined availability and prerequisites.
- After October 1, 2025: MDTI is no longer sold separately. Its features are included in broader security bundles and integrated into Microsoft Defender XDR and Microsoft Sentinel.
- Existing standalone subscriptions will continue until the end of their term but cannot be renewed individually.
- Customers should plan to transition to the new licensing model.
Expert advice: For guidance on transitioning and optimizing your licensing strategy, contact SCHNEIDER IT MANAGEMENT.
More Information
- Microsoft Tech Community Blog:
https://techcommunity.microsoft.com/blog/defenderthreatintelligence/mdti-is-converging-into-microsoft-sentinel-and-defender-xdr/4427991 - Microsoft Product Terms: https://www.microsoft.com/licensing/terms
For our Microsoft page, please visit: https://www.schneider.im/software/microsoft.
Please contact us for expert services on your specific Microsoft software and online services requirements and to request a quote today.
