MDTI reaches end of life August 1, 2026

On this page4 sections

1. What's changing
2. Key dates
3. What CSP partners need to do
4. Next steps

Microsoft Defender Threat Intelligence (MDTI) reaches end of life on August 1, 2026 – here's what that means for you.

Impacted audience

CSP direct bill partners, indirect resellers, and distributors with customers holding active MDTI subscriptions.

Microsoft Defender Threat Intelligence (MDTI) reaches end of life on August 1, 2026. This announcement confirms final dates and outlines what Cloud Solution Provider (CSP) partners need to do.

What's changing

Microsoft is retiring the MDTI standalone SKU. All MDTI capabilities are now available at no extra cost through the Microsoft Defender portal to any customer with Microsoft Defender or Microsoft Sentinel. Customers don't need to take migration action - the features are already available to them.

Key dates

• August 1, 2025: MDTI SKU removed from price list preview
• August 1, 2026: Deprecation takes effect; all MDTI subscriptions end

What CSP partners need to do

If you have CSP customers with active MDTI subscriptions, Microsoft will issue a credit memo to your partner account for any remaining subscription term past August 1. You're responsible for passing that credit through to your end customers. Make sure your billing team is aware and is prepared to process this.

For customers on Volume Licensing (Enterprise Agreement), Microsoft handles refunds directly.

Next steps

Learn how MDTI is converging into Microsoft Sentinel and Defender XDR.