
Executive summary
- In September 2025, Microsoft introduced new security and compliance add-ons for Business Premium subscribers, designed to help small and mid-sized businesses strengthen protection without the fuss.
- The three new add-ons: Defender Suite, Purview Suite, and a bundle of both, give UK businesses access to enterprise-level security without the need for a huge IT support team.
- We believe the best approach for UK businesses is to pick add-ons that fill real gaps, train staff on how to use them, then build security into the team’s everyday routine.
Introduction
2025 certainly does seem to be the year of the cyberattack.
We’ve seen multiple instances of attacks of big UK businesses, and they serve as a timely reminder to check (and double-check) your cybersecurity posture.
With that in mind, there’s some good news for Microsoft 365 Business Premium subscribers. Microsoft has rolled out three new security and compliance add-ons designed to give small businesses the same level of protection that larger enterprises enjoy, but without the hefty price tag or the complexity of managing dozens of security products.
And, bearing in mind just how prevalent and high-profile cyberattacks have become this year, the timing couldn’t be better.
What are the new Business Premium add-ons?
Microsoft has created three add-ons to sit on top of Business Premium: Defender Suite, Purview Suite, and then a combined Defender + Purview bundle.
These add-ons were made available for purchase in September 2025 and are capped at 300 seats per tenant, making them an ideal choice for small-and-medium sized businesses.
Here are the highlights of what’s new for each add-on:
Defender Suite (about £7.50 per user, per month) focuses on stopping attacks before they spread. It includes advanced identity protection (Microsoft Entra ID P2), Defender for Endpoint Plan 2 for EDR and remediation, Defender for Office 365 P2 for email protection and attack simulation training, Defender for Identity and Defender for Cloud Apps to police SaaS usage. These are the tools that protect logins, devices and email – the classic entry points for cybercriminals.
Purview Suite (about £7.50 per user, per month) is essentially the compliance and data-protection pack. It brings Insider Risk Management, information protection and automatic labelling, data loss prevention (DLP) across email and files, message encryption, and Customer Key support, plus advanced eDiscovery and auditing capabilities. It also includes data security posture management for AI, so Copilot and other AI apps get monitored for risky data handling.
Defender + Purview bundle (about £11 per user, per month) brings together both sets of capabilities at a discounted rate, and Microsoft says customers can save substantially versus buying everything separately. That bundle is the easiest path if you want both threat protection and compliance in one go.
Why this matters for UK businesses
Small and mid-sized businesses are often attractive targets for cybercriminals because their defences are often lighter, and their supply chain exposure can often be high.
And, for many UK organisations, a single breach can create regulatory headaches, contractual fallout, or reputational loss. These new Business Premium add-ons give SMBs the tools to tackle both external attacks and internal risks, without forcing a full migration to enterprise licences like E5.
But simply adding these to your existing package doesn’t mean you’re instantly protected – these tools work best when they’re configured and monitored. It’s essential that you have sensible policies, trained staff, and an incident response plan in place.
Which add-on is best for your business?
So, if you are looking to tighten your security, which of these new add-ons should you choose? The best place to start is to think about the threats you actually face and which gaps you need to close.
Here are some pointers for each add-on to get you off on the right track:
- Defender Suite is best if you’re worried about ransomware, phishing, and unmanaged devices. It toughens your security in regard to identity, endpoints (i.e. your devices), and email.
- Purview Suite is the choice if compliance, data loss prevention, and audit trails are your priority. This is the package we’d recommend for anyone looking for regulated data and legal readiness.
- Bundle if you fall into both of the groups above, or if you want a single licence to hand to your IT support provider (like us!) to manage end-to-end on your behalf.
Need a little help deciding?
These new Microsoft 365 Business Premium add-ons make it far easier for UK businesses to get serious about security and compliance (without hiring an army of specialists).
But the tech only helps if it’s paired with good policy, training, and monitoring. That’s why we’d always recommend having a trusted partner, like the team here at Get Support, help you tune these new features so they actually reduce risk.
If you want a quick licence review, a risk assessment, or help scoping a pilot for your Business Premium subscription, speak to your Get Support Customer Success Manager or call our friendly team on 01865 594 000.