Tech Optimizer
October 17, 2026
Microsoft has expanded its Defender security software to Linux desktop environments, currently in public preview. Microsoft Defender for Endpoint is designed for organizations using Linux workstations and aims to enhance security for developers who interact with sensitive resources. Key features include real-time antivirus protection, endpoint detection and response, threat investigation, vulnerability management, and centralized security monitoring. The software uses the same deployment packages and installation methods as those for Linux servers, supporting distributions like Ubuntu LTS, Debian, Fedora, Red Hat Enterprise Linux, openSUSE Leap, SUSE Linux Enterprise, Rocky Linux, and AlmaLinux. Compatibility with desktop environments is based on the underlying distribution and kernel. The software identifies devices by assessing operating system metadata, and if it cannot classify a machine as a workstation, it defaults to identifying it as a server. This development follows the introduction of Defender for Linux servers in 2020. Organizations need a Microsoft Defender for Endpoint subscription and must meet Linux system requirements to use the software.