Microsoft Defender antivirus adds Linux desktop support in preview
Microsoft Defender antivirus with endpoint protection is now in public preview for Linux desktops.
Why it matters: Linux adoption is growing in corporate environments, especially among developers. Legal and compliance teams benefit from consistent cybersecurity tools that help manage risk and meet regulatory requirements across multiple operating systems.
- Microsoft Defender for Endpoint public preview launched for Linux desktops on October 16, 2026.
- Supports major Linux distros: Ubuntu, Debian, Fedora, RHEL, CentOS, SUSE Enterprise, and Oracle Linux.
- Requires Microsoft Defender for Endpoint Plan 2 or Microsoft 365 E5/E7 subscription.
- Features include antivirus scanning, endpoint detection and response (EDR), vulnerability management, threat hunting, and device isolation to contain compromised devices.
Microsoft has expanded its security suite with the public preview release of Microsoft Defender for Endpoint for Linux desktops, providing antivirus and threat protection tailored for Linux desktop environments.
This new offering supports popular enterprise Linux distributions such as Ubuntu, Debian, Fedora, Red Hat Enterprise Linux (RHEL), CentOS, SUSE Linux Enterprise Server, and Oracle Linux. Organizations can deploy Defender on Linux desktops using familiar methods already implemented for Linux servers, simplifying endpoint management across platforms.
Access to the service requires a subscription to Microsoft Defender for Endpoint Plan 2 or the comprehensive Microsoft 365 E5/E7 packages. Defender delivers layered security capabilities including traditional antivirus scanning, endpoint detection and response (EDR)—which helps detect and respond to security threats in real time—vulnerability assessment, proactive threat hunting, and device isolation that can quarantine affected devices to prevent spread of attacks.
A spokesperson for Microsoft noted the importance of platform consistency in threat protection: "As Linux desktops become more prevalent among developers and enterprise users, it's critical organizations maintain uniform cybersecurity practices across devices to reduce organizational risk." This move aligns with regulatory and compliance frameworks that increasingly require consistent security controls across all systems handling sensitive data.
Though still in public preview with no announced general availability date, this development enhances legal and compliance teams’ ability to monitor and mitigate cybersecurity risks on Linux desktops, an area traditionally less covered by enterprise antivirus solutions. With increased regulatory focus on comprehensive cybersecurity hygiene, Microsoft’s expansion may support compliance with standards such as NIST, GDPR, and others that stress endpoint security.
By the numbers:
- October 16, 2026 — public preview launch date for Defender on Linux desktops
- 7 Linux distributions supported — including Ubuntu, RHEL, and SUSE
- 2 subscription levels required — Defender for Endpoint Plan 2 or Microsoft 365 E5/E7
Yes, but: The feature set is currently available only in public preview, so enterprises should evaluate its maturity before full deployment in critical environments.
What's next: Microsoft has not yet announced a general availability date for Defender on Linux desktops, but wider adoption is expected following preview feedback.