[Serverless: Mar 23] Update Security billing dimensions for Endpoint Protection

deploy-manage/cloud-organization/billing/security-billing-dimensions.md

@@ -27,12 +27,12 @@ Your monthly bill is based on the capabilities you use. When you use Security An
 
 ## Endpoint Protection [security-billing-endpoint-protection]
 
-Endpoint Protection is an *optional* add-on to Security Analytics that provides endpoint protection and threat prevention. Endpoint Protection is available in two tiers of selected features to enable common endpoint security operations:
+Endpoint Protection is included with Security Analytics with no per-endpoint licensing fees, providing endpoint protection and threat prevention for all your endpoints. Endpoint Protection is available in two tiers of selected features to enable common endpoint security operations:
 
 * **Endpoint Protection Essentials** — Includes robust protection against malware, ransomware, and other malicious behaviors.
 * **Endpoint Protection Complete** — Adds endpoint response actions and advanced policy management.
 
-You pay based on the number of protected endpoints configured with the {{elastic-defend}} integration. Logs, events, and alerts from these endpoints are billed using the **Ingest** and **Retention** pricing. If you're using {{elastic-defend}} solely for data collection (without Endpoint Essentials or Complete add-ons), endpoints do not count towards billing. In this case, you're only billed for data ingestion and retention, and you can configure event collection and telemetry in the policy without enabling protections. 
+Endpoint Protection is built into all {{sec-serverless}} projects without additional per-endpoint license cost. You only pay for the alerts and telemetry generated by your endpoints, billed using the **Ingest** and **Retention** rates. You can customize telemetry collection in your endpoint policy to precisely control your data volume.
 
 ## Cloud Protection [security-billing-cloud-protection]