Pricing
Email protection, identity investigations, and phishing takedowns in one plan.
Free, Professional, Professional+
Investigate suspicious activity and see the evidence.
Protect email and identities, respond to threats, and pursue takedowns.
Add SOC Copilot for Email and more takedown capacity.
One paid seat covers a Microsoft 365 user's mailbox and identity. Takedown allowances are shared across the organization.
| Capability | Free | Professional | Professional+ |
|---|---|---|---|
| Risk visibility and detections | Included | Included | Included |
| Email, identity, and domain assessments | Limited assessments | Included | Included |
| Continuous email scanning and protection | — | Included | Included |
| Ongoing identity investigations | — | Included | Included |
| Context Hub | With connected organization data | Included | Included |
| Response under configured policies | — | Included | Included |
| Phishing takedown requests | Investigation findings only | Included allowance | Higher allowance |
| SOC Copilot for Email | — | — | Included |
Submit an email or URL. No Microsoft 365 connection required.
Context Hub
Agents combine incoming signals with context about your people, apps, and business relationships. As they investigate, they feed findings back into Context Hub, continuously enriching the knowledge available to every agent.
Explore Context HubSubmit an email or URL for a free scan without connecting Microsoft 365. The Free plan also provides limited agent assessments and risk visibility. An administrator can connect your organization to enable identity and app assessments and organization-specific Context Hub data.
No. Professional and Professional+ include email protection, identity investigations, Context Hub, and a phishing takedown allowance in one platform subscription. Professional+ adds SOC Copilot for Email and a higher takedown allowance.
A protected user is a Microsoft 365 user assigned a paid Mesa seat. That seat covers the user's mailbox and identity under the selected plan.
Professional is $4 per protected user when billed monthly, or $36 per user billed annually, equivalent to $3 per month. Professional+ is $8 per protected user when billed monthly, or $72 per user billed annually, equivalent to $6 per month. Annual billing saves 25% compared with twelve monthly payments.
Paid plans include an organization-level takedown allowance, with a higher allowance in Professional+. Your team reviews and approves requests before submission. The registrar or hosting provider determines whether and when a site is removed.
A submitted email or URL does not require an organization connection. Email protection and identity investigations require the appropriate Microsoft 365 administrator consent. Response actions use the permissions and approval policies configured for your organization.