If your Microsoft 365 E3 tenant needs the premium security stack — risk-based identity, advanced email investigation, and endpoint EDR — the instinct is to buy each piece as an add-on. Run the October 2026 list prices and the stack prices itself out:
The stack, priced
| Component | Per user/month |
|---|---|
| Microsoft 365 E3 | $39 |
| + Microsoft Entra ID P2 (standalone) | +$10 |
| + Defender for Office 365 Plan 2 | +$5 |
| + Defender for Endpoint Plan 2 | +$5.20 |
| E3 + three add-ons | $59.20 |
| Microsoft 365 E5 (all-in) | $60 |
For $0.80 more per seat than the three-add-on stack, E5 adds Defender for Identity, Defender for Cloud Apps, Power BI Pro, Teams Phone, and the Purview premium tier (Insider Risk Management, eDiscovery Premium, Communication Compliance). Any one of those extras is worth more than eighty cents.
The decision rule, per user group
- One add-on needed → buy the add-on. $44–$49 vs. $60: no contest.
- Two add-ons needed → borderline. $54 vs. $60 — add-ons stay cheaper, but if the missing third capability is Defender for Endpoint P2, you're one threat away from buying it anyway.
- Three add-ons needed → E5 wins outright. The stack is $59.20; the suite is $60 and carries five more products.
And the honest footnote: none of this means upgrading everyone. The cheapest structure is almost always mixed licensing — E5 for admins, execs, and high-risk users; E3 (plus targeted add-ons) for the rest. Don't let a renewal quote put 300 people on E5 for a need that 40 people have.
Microsoft's July 1, 2026 commercial price increase moved E3 $36→$39, E5 $57→$60, and standalone Entra ID P2 $9→$10 (Defender for Office 365 P2 held at $5; Defender for Endpoint P2 at $5.20). The E3–E5 gap held at $21 — but add-on stacks got pricier faster than the suite. Any "add-ons vs. E5" decision made before July deserves a fresh pass.
Step by step
- Inventory who actually needs what. In the Microsoft 365 admin center, list the real audiences: who needs risk-based Conditional Access and PIM (usually admins and execs — Entra P2), who needs Threat Explorer and automated investigation (security team and high-phishing-risk users — Defender for Office 365 P2), and how many devices need full EDR vs. basic protection (Defender for Endpoint P2).
- Count capabilities per group, not per company. Most tenants have a "three-capability" cohort and a much larger "zero or one" cohort. That's the whole game.
- Price each group both ways. E3 $39 + the add-ons its cohort actually needs vs. E5 $60 — per group, per user, per month. Annual commitment prices; monthly terms run ~20% higher.
- Assign per user. Microsoft lets you mix E3 and E5 (and add-ons) inside one tenant. The license follows the need, not the org chart.
- Rerun this at every renewal. Microsoft raised commercial list prices on July 1, 2026 (E3 $36→$39, E5 $57→$60, Entra P2 $9→$10). The E3–E5 gap held at $21, but the three-add-on stack got $4 more expensive while E5 rose only $3 — so any add-on-vs-suite math you did before July is stale.
200-seat org, 40 users need the full stack: mixed 160 E3 + 40 E5 at $8,640/mo vs. blanket E5 at $12,000/mo — $3,360/mo back. And if someone quotes E3 + three add-ons for everyone ($11,840/mo), all-E5 ($12,000) is barely more — and mixed licensing crushes both.
In the admin center and a spreadsheet.
Prices verified October 18, 2026: Microsoft 365 E3 ($39) and E5 ($60) list prices confirmed on Microsoft's own enterprise plans pricing page (annual commitment, paid yearly). Standalone add-on prices — Entra ID P2 ($10), Defender for Office 365 Plan 2 ($5), Defender for Endpoint Plan 2 ($5.20) — cross-checked against multiple October 2026 NCE price-list sources (o365hq, redresscompliance, trustedtechteam, G2). Feature inclusions (E5 bundles all three P2 products plus Defender for Identity and Defender for Cloud Apps) confirmed in Microsoft's own licensing FAQs. Your reseller or regional pricing may differ.
Editorial note: the suite is only a deal when the capabilities are used. If your "three-add-on cohort" is really one person with EDR needs and a security team that lives in Threat Explorer, buy two add-ons for a few seats and stay on E3 for the rest. The bundle math only favors E5 for users who genuinely need the stack.
Partner disclosure: LicenseWise may earn a referral fee. It does not change the analysis or the price you pay. How partnerships work.
Want a second pair of eyes on your seat mix?
Our recommended partner Olive + Goose does free license audits and CSP pricing reviews — including whether E5 beats your add-on stack.
LicenseWise may earn a referral fee when you buy through our partner links.