Microsoft Security Copilot
Get ahead of what could go wrong, so more things go right
Move forward confidently with autonomous Security Copilot agents built right into the Microsoft 365 E5 security tools you use every day.
Tackle tomorrow’s security problems, today
Detect, investigate, and respond faster with Security Copilot agents across Microsoft Purview, Defender, Intune, and Entra.
Microsoft Defender
Know which phishing alerts matter
Get clear, natural-language verdicts of reported alerts from the Phishing Triage Agent.
Microsoft Entra
Keep Conditional Access strong and up to date
Identify gaps, optimize policies, and strengthen identity security with the Conditional Access Optimization Agent.
Microsoft Defender
Turn threat intelligence into briefings, in minutes
Get insight-rich reports customized to your organization with the Threat Intelligence Briefing Agent.
Microsoft Purview
Focus on the riskiest data security alerts
Effectively prioritize data loss prevention and insider risk alerts with the Data Security Triage Agent.
Explore Security Copilot resources
How to get started with agents
Find out how Microsoft 365 E5 customers can access Security Copilot.
Stay up to date on Security Copilot
Explore new innovations, stories from partners, and best practices in the Microsoft Security Copilot blog.
Get guidance for adopting and scaling Security Copilot agents
Access adoption guides, training, and other resources to help you make the most of the agents.
Build your Security Copilot skills
Deepen your AI and agent expertise with hands-on Security Copilot workshops.
Discover how customers innovate with Security Copilot
Frequently asked questions
- Security Copilot is a generative and agentic AI-powered assistant for daily operations in security and IT. Copilot empowers teams to manage and protect at the speed and scale of AI. By turning global threat intelligence, industry best practices, and organizations’ data from Microsoft and partner tools into tailored insights and actions, Security Copilot helps organizations respond faster and catch what others miss.
- Microsoft 365 E5 is a subscription that delivers comprehensive security and compliance capabilities through Microsoft Defender, Microsoft Entra, Microsoft Intune, and Microsoft Purview—making it ideal for organizations with complex regulatory or risk management needs. It consolidates multiple premium features into a single license, simplifying procurement and positioning organizations for AI-readiness with built-in support for Microsoft 365.
- Eligible Microsoft 365 E5 customers will have 400 Security Compute Units (SCUs) per month for every 1000 user licenses, up to 10,000 SCUs per month. This included capacity is expected to support typical scenarios.
- Example 1: An organization with 400 seats gets 160 SCUs/month.
- Example 2: An organization with 4,000 seats gets 1,600 SCUs/month.
- Microsoft 365 E5 customers already using Security Copilot as of November 18, 2025, can access this benefit now. All other Microsoft 365 E5 customers will be activated through a phased roll-out in the upcoming months. Customers will receive advanced notice.
Follow Microsoft Security