Read-only visibility into real-time protection, signature freshness and active threat counts. Microsoft Defender performs actual blocking and remediation.
Know your devices.
See security clearly.
ONE Endpoint is a Windows security-posture monitoring solution designed to observe Microsoft Defender, Windows Firewall, threat status and device health through authorized local collectors and signed reporting.
Request authorized evaluation →Explore ONE Shield →Endpoint intelligence, responsibly delivered.
Development capability overview. Activation on customer devices follows written authorization and installation acceptance.
Authorized Windows Firewall, OS status and update service observation without changing system protection settings.
Opt-in signed event summaries designed for organization-isolated ONE Shield dashboards, with sensitive file paths excluded from reports.
ONE Endpoint Downloads
Device monitoring shares the ONE Shield collector foundation. Full Endpoint and Update Manager installers are still pending.
Client
Use the shared Defender collector for supported security-posture observation. This package is not a complete Endpoint or patch-management installer.
Download shared collectorServer
Central endpoint policy, deployment rings and update orchestration do not yet have a dedicated installable server release.
Installer not available yetConsole
Review supported security reporting through ONE Shield. Full Endpoint policy and patch deployment console features remain pending.
Open Security ConsoleWindows packages are unsigned test releases. Downloading a package does not activate cloud remote access or start backups. Register for ONE Accounts · All product downloads
Free download. Free installation.
ONE uses a usage-based demo, with no fixed day-based expiry. Start with one operator and two devices; expansion to more operators, devices or concurrent sessions calls for a subscription.
Account operator/device limits are enforced in ONE Accounts. Native app session and workload metering are still being integrated. Shared public IP is not the sole basis for requiring payment. Automatic checkout is not active.
View subscription options →