Windows 10 Enterprise E3 – Billed Monthly

Device Guard puts you in control of your environment with rigorous access controls that help protect the Windows system core and prevent malware, untrusted apps, and executables from running on your devices.

Credential Guard helps protect user access tokens from being hacked by storing them inside a secure hardware isolated container, defeating a key tactic used to compromise networks.

Windows Defender Advanced Threat Protection (ATP) enables Windows Enterprise customers to detect, investigate, and remediate advanced persistent threats and data breaches on their networks. Running alongside any anti-virus (AV) solution, Windows Defender ATP is continuously up-to-date and can help lower costs.