Use this as a quick reference when a tenant's Defender posture checks aren't producing the results you expect. The matrix covers the six Augmentt Defender checks most commonly flagged in support tickets.

<thead><tr><th>Augmentt check</th><th>Minimum required Microsoft license</th><th>Reference</th></tr></thead>

Safe Links policy (users, groups, domains)	Defender for Office 365 Plan 1	Safe Links in Defender for Office 365
Safe Attachments policy	Defender for Office 365 Plan 1	Safe Attachments in Defender for Office 365
Anti-phishing policy (impersonation, spoof)	Defender for Office 365 Plan 1	Anti-phishing policies in Defender for Office 365
Preset security policies (Standard / Strict)	Defender for Office 365 Plan 1	Preset security policies
Attack simulation training	Defender for Office 365 Plan 2	Attack simulation training
Threat Explorer / Real-time detections	Plan 1 (Real-time detections) · Plan 2 (Threat Explorer full)	Threat Explorer and Real-time detections

Where Defender for Office 365 is included: Plan 1 ships with Microsoft 365 Business Premium and is available as a standalone add-on; Plan 2 is included with E5 Security and E5, or as a standalone add-on. See Microsoft Defender for Office 365 overview for the current inclusions.

Last validated against Microsoft documentation on 2026-04-22. Microsoft updates these service descriptions periodically — re-check the linked Microsoft Learn pages if you're diagnosing a check introduced or renamed recently.

What are you seeing?