diff --git a/docs/serverless/billing.asciidoc b/docs/serverless/billing.asciidoc
index 5dbd77fd7f..5b8c14589e 100644
--- a/docs/serverless/billing.asciidoc
+++ b/docs/serverless/billing.asciidoc
@@ -20,7 +20,7 @@ Data volumes for both ingest and retention are based on the uncompressed data si
 [[security-billing-endpoint-protection]]
 == Endpoint Protection
 
-Endpoint Protection is an _optional_ add-on to Security Analytics that provides on-endpoint protection and prevention. Endpoint Protection is available in two tiers of selected features to enable common endpoint security operations:
+Endpoint Protection is an _optional_ add-on to Security Analytics that provides endpoint protection and threat prevention. Endpoint Protection is available in two tiers of selected features to enable common endpoint security operations:
 
 * **Endpoint Protection Essentials** — Includes robust protection against malware, ransomware, and other malicious behaviors.
 * **Endpoint Protection Complete** — Adds endpoint response actions and advanced policy management.