Built-in protection plans

The following table provides more information about the built-in protection plans.

Modules and settings	Built-in protection plans
	Essential protection	Extended protection	Complete protection	Backup entire workload
	Minimal downtime and data loss, effortless recovery with short RPO and easy maintenance	Second level of protection: Business continuity, proactive mitigation of security risks and compliance	Third level of protection: Business continuity, near-zero RPO, proactive mitigation of security risks, data leaks prevention and compliance	Backs up the entire workload to the cloud
Backup	On	On	On	On
What to back up Items to back up	Entire machine	Entire machine	Entire machine	Entire machine
Continuous data protection (CDP)	Disabled	Disabled	Enabled	Enabled
Where to back up	Cloud storage	Cloud storage	Cloud storage	Cloud storage
Schedule	Monday to Friday at 12:00 PM Additionally enabled options and start conditions: If the machine is turned off, run missed tasks at the machine startup Wake up from the sleep or hibernate mode to start a scheduled backup Save battery power: Do not start when on battery Do not start when on metered connection	Monday to Friday at 12:00 AM Additionally enabled options and start conditions: If the machine is turned off, run missed tasks at the machine startup Wake up from the sleep or hibernate mode to start a scheduled backup Save battery power: Do not start when on battery Do not start when on metered connection	Monday to Friday at 12:00 AM Additionally enabled options and start conditions: If the machine is turned off, run missed tasks at the machine startup Wake up from the sleep or hibernate mode to start a scheduled backup Save battery power: Do not start when on battery Do not start when on metered connection	Monday to Friday at 12:00 AM Additionally enabled options and start conditions: If the machine is turned off, run missed tasks at the machine startup Wake up from the sleep or hibernate mode to start a scheduled backup Save battery power: Do not start when on battery Do not start when on metered connection
Backup scheme	Always incremental	Always incremental	Always incremental	Always incremental
How long to keep	Keep all backups 90 days	Keep all backups 90 days	Keep all backups 90 days	Keep all backups 90 days
Backup options	Default options	Default options, plus: Performance and backup window (the green set): CPU priority: Low Output speed: 50%	Default options, plus: Performance and backup window (the green set): CPU priority: Low Output speed: 50%	Default options, plus: Performance and backup window (the green set): CPU priority: Low Output speed: 50%
EDR	Off	Off	On
Antivirus and Antimalware protection	On	On	On
Active Protection	On	On	On
Advanced Antimalware	On	On	On
Network folder protection	On	On	On
Server-side protection	Off	Off	Off
Self protection	On	On	On
Cryptomining process detection	On	On	On
Quarantine	Remove quarantined files after 30 days	Remove quarantined files after 30 days	Remove quarantined files after 30 days
Behavior engine	Quarantine	Quarantine	Quarantine
Exploit prevention	Notify and stop the process	Notify and stop the process	Notify and stop the process
Real-time protection	Quarantine	Quarantine	Quarantine
Schedule scan	Quick scan: Quarantine At 08:00 PM, Sunday to Saturday Full scan: Quarantine At 09:00 PM, Wednesday and Friday Additionally enabled options and start conditions: Wake up from the sleep or hibernate mode to start a scheduled backup	Quick scan: Quarantine At 08:00 PM, Sunday to Saturday Full scan: Quarantine At 09:00 PM, Wednesday and Friday Additionally enabled options and start conditions: Wake up from the sleep or hibernate mode to start a scheduled backup	Quick scan: Quarantine At 08:00 PM, Sunday to Saturday Full scan: Quarantine At 09:00 PM, Wednesday and Friday Additionally enabled options and start conditions: Wake up from the sleep or hibernate mode to start a scheduled backup
Exclusions	None	None	None
URL filtering	Off	On	On
Malicious website access	Block	Block	Block
Categories to filter	Default options	Default options	Default options
Exclusions	None	None	None
Microsoft Defender Antivirus	Off	Off	Off
Firewall management	Off	On	On
Microsoft Security Essentials	Off	Off	Off
Vulnerability assessment	On	On	On
Vulnerability assessment scope	Microsoft products, Windows third-party products, Apple products, macOS third-party products, Scan Linux package	Microsoft products, Windows third-party products, Apple products, macOS third-party products, Scan Linux package	Microsoft products, Windows third-party products, Apple products, macOS third-party products, Scan Linux package
Schedule	At 11:00 AM, only on Wednesday and Friday	At 11:00 AM, only on Wednesday and Friday	At 11:00 AM, only on Wednesday and Friday
Patch management	On	On	On
Microsoft products	All updates	All updates	All updates
Windows third-party products	All updates	All updates	All updates
Schedule	At 12:30 PM, only on Wednesday and Friday	At 12:30 PM, only on Wednesday and Friday	At 12:30 PM, only on Wednesday and Friday
Pre-update backup	On	On	On
Data protection map	Off	Off	On
Extensions and exception rules	–	–	Default options (66 extensions to detect)
Schedule	–	–	At 03:40 PM, Monday to Friday
Device control	Off	Off	Off
Access settings	Allowed: All	Allowed: All	Allowed: All
Device types allowlist	1 allowed USB HID (mouse, keyboard etc.)	1 allowed USB HID (mouse, keyboard etc.)	1 allowed USB HID (mouse, keyboard etc.)
USB devices allowlist	Empty	Empty	Empty
Exclusion	None	None	None
Data Loss Prevention	Off	Off	Off
Mode	–	–	–
Advanced settings	–	–	–
Disaster Recovery	Off	Off	Off

For more information about protection plans, see Protection plans and modules.