Extended Security Updates (ESU): What They Are and Are They Worth It?

As Microsoft approaches the official End of Support (EOS) date for Windows 10 on October 14, 2025, organisations and individual users alike face a critical decision: upgrade to Windows 11 or temporarily rely on Microsoft’s Extended Security Updates (ESU). While ESUs offer a way to maintain security compliance beyond EOS, are they a sustainable long-term solution, or simply a temporary stopgap?

This blog examines what ESUs are, who should consider them, and how they compare both financially and strategically to upgrading systems or refreshing hardware.

What Are Extended Security Updates (ESU)?

Extended Security Updates (ESU) are paid subscriptions offered by Microsoft that provide critical and important security patches for Windows versions that have reached end of support. These updates are designed to help organisations that are unable to upgrade in time continue operating securely while transitioning to a modern platform.

For Windows 10, ESUs will be available starting in October 2025, with updates delivered via traditional channels such as Windows Update, Windows Server Update Services (WSUS), or Microsoft Endpoint Configuration Manager.

What ESU Includes:

• Important security updates
• Delivery through standard Microsoft update channels

What ESU Does Not Include:

• New features or functional enhancements
• Non-security bug fixes
• Technical or product support
• Performance optimisations
• Compatibility updates for third-party software

Who Should Consider ESU—and Who Shouldn’t?

While ESUs may sound like an easy fallback option, they are not intended for broad or indefinite use. Their primary function is to support organisations with legitimate, short-term constraints that prevent immediate migration.

ESUs May Be a Strategic Fit If:

• Your organisation relies on mission-critical legacy applications or hardware incompatible with Windows 11
• You are in the midst of a phased rollout or pilot testing of Windows 11
• Regulatory or industry compliance processes require additional validation time

ESUs Likely Aren’t Necessary If:

• Your existing hardware is already Windows 11 compatible
• You are a small business with limited technical complexity
• No major technical barriers to migration exist—only planning or resource delays
• Your devices are already aging or nearing end-of-life

ESU vs. Windows 11: A Cost-Benefit Comparison

The Cost of ESU:

The pricing for Windows 10 ESUs as of this writing, will be $66 to support 1 device, with an increase each year.

The Cost of Upgrading or Replacing Devices:

• Upgrading to Windows 11 is free for devices that meet Microsoft’s hardware requirements
• For incompatible systems, a hardware refresh may be necessary—but this can often align with existing IT lifecycle budgets
• Newer devices offer significantly better performance, enhanced security features, and improved energy efficiency

Long-Term Return on Investment:

Investing in modernisation—whether through OS upgrades or hardware refreshes—delivers better manageability, improved user productivity, and stronger cybersecurity posture. These benefits often outweigh the short-term savings of postponing upgrades via ESU.

Device Lifecycle and Budget Planning

Most enterprises follow a 3–5 year hardware refresh cycle. If your Windows 10 systems are approaching that timeframe, the cost of ESUs may not be justifiable—especially when compared to the benefits of newer hardware.

Practical Recommendations:

• Audit your current device inventory for Windows 11 compatibility
• Develop a phased migration plan that aligns with budget and resource availability
• Use ESUs sparingly and strategically, reserving them for systems where immediate upgrade is not feasible due to technical or operational constraints

Final Thoughts: Is ESU Worth It?

Extended Security Updates are not a long-term solution, they are a tactical one. They provide a safety net for organisations navigating the complexities of IT transformation but are best viewed as a temporary bridge, not a destination.

For the vast majority of businesses and users, the most cost-effective and secure approach is to:

• Upgrade compatible devices to Windows 11
• Replace outdated hardware that no longer meets modern standards
• Leverage ESUs only where strictly necessary, and always with a clearly defined exit plan

By proactively planning your migration and limiting reliance on ESUs, you not only reduce future costs but also position your organisation for greater agility, security, and innovation in the years ahead.