@Mark Aldridge This is correct, you don't need Endpoint Manager to deploy ATP Defender, however, hardening devices, software updates, policies etc. can help fill gaps in ATP Defender vulnerabilities.