Trace Id is missing
Skip to main content
Microsoft Security

Microsoft Security Copilot

Protect your organization at the speed and scale of AI with a generative AI-powered assistant for daily operations in security and IT.
News

Announcing Microsoft Security Copilot agents

Automate high-volume tasks with adaptive generative AI assistance that your team controls.
Overview

Protect at the speed and scale of AI

  • Summarize vast data signals into key insights to cut through the noise, and make use of AI-driven guidance and analysis across identities, devices, data, clouds, and apps.
    A close-up screenshot of a computer screen displaying a colorful logo and potentially malicious script text.
  • Provide critical guidance and context for your security team. Use agents to automate processes and help your team respond to incidents in minutes, instead of hours or days.
    Screenshot of computer alert with text reporting on threat intelligence and IP address reputation score.
  • Empower your staff with step-by-step guidance and automate tasks with agents so your security team can focus on strategic priorities.
    Screenshot of a computer screen showing investigation findings related to malicious PowerShell script.
Back to tabs

How Security Copilot works

See how Copilot assists in security and IT operations.
Scenarios

Your AI assistant for end-to-end security

Ask Security Copilot questions in natural language and receive actionable responses to common security and IT tasks in seconds.

Empower security teams with gen AI

Back to tabs
Integrations

Products integrated with Security Copilot

Unified security operations platform

Unified security operations platform

Outpace cyberthreats with XDR and SIEM, all in one platform—available with Copilot embedded.
Microsoft Sentinel

Microsoft Sentinel

Collect security data and correlate alerts from virtually any source with intelligent security analytics.
Microsoft Defender XDR

Microsoft Defender XDR

Help prevent and detect cross-domain cyberattacks at the speed of AI—available with Copilot embedded.
Microsoft Intune

Microsoft Intune

Mitigate cyberthreats to devices, protect data, and improve compliance across clouds— available with Copilot embedded.
Microsoft Defender Threat Intelligence

Microsoft Defender Threat Intelligence

Understand cyberthreats and expose suspicious infrastructure with threat intelligence—included with Copilot.
Microsoft Entra

Microsoft Entra

Help protect any identity and secure access to any resource with one family of solutions—available with Copilot embedded.
Microsoft Purview

Microsoft Purview

Secure and govern your data at the machine speed and scale of AI—available with Copilot embedded.

Microsoft Defender External Attack Surface Management

See your rapidly changing, global external cyberattack surface in real time—available with Copilot embedded.

Microsoft Defender for Cloud

Understand multicloud risk and get remediation recommendations—available with Copilot embedded.
INSIGHTS

Perform security and IT tasks faster with Copilot

Learn more about how Security Copilot can benefit your team with productivity and economic impact in these studies.
A man and a women looking at each other and smiling
Pricing

Security Copilot pricing

Start using Security Copilot today by easily adjusting compute capacity to meet your needs. You'll need an Azure subscription account—sign in to your Azure account or create a new account for free.
Customer stories

What customers are saying

RESOURCES

AI for security and beyond

Frequently asked questions

  • Security Copilot is a generative, AI-powered assistant for daily operations in security and IT. Copilot empowers teams to manage and protect at the speed and scale of AI by turning global threat intelligence, industry best practices, and organizations’ data from Microsoft and partner tools into tailored insights to respond faster and catch what others miss.
  • Security Copilot is the only security AI product that combines a specialized language model with security-specific capabilities from Microsoft. These capabilities incorporate a growing set of security-specific skills informed by our unique global threat intelligence and more than 84 trillion daily signals.
  • Yes, Security Copilot is generally available for use by security and IT teams.
  • Get started by flexibly provisioning compute capacity to run Security Copilot workloads. Scale confidently to meet your evolving needs even during periods of unexpected demand. Learn about pricing and read more about how to get started with Security Copilot.
  • Yes. Copilot integrates with other Microsoft Security products, including but not limited to Microsoft Defender XDR, Microsoft Sentinel, Microsoft Intune, Microsoft Entra, Microsoft Purview, Microsoft Defender for Cloud, and Microsoft Defender External Attack Surface Management. It also integrates with Azure security tools including Azure Web Application Firewall (WAF) and Azure Firewall. Copilot uses the data and signals from these products to generate customized guidance.
  • Yes. Security Copilot integrates with partner products to provide plugins and promptbooks that extend customer insights. Copilot capabilities are also expanding to include agents built by partners. Learn more about partners that integrate with Security Copilot.
  • The only prerequisite for Security Copilot is an Azure account. However, organizations get the most value from Copilot when connected to their security data. We recommend connecting your Microsoft Security tools and integrating your other security tools to have the best experience and get the most value from Copilot.
  • Yes. Access to Microsoft Defender Threat Intelligence (MDTI) is included with Microsoft Security Copilot. Learn more about how Copilot and MDTI work together.
  • Security Copilot agents enhance security and IT operations with autonomous and adaptive automation. Integrated seamlessly with Microsoft Security solutions and partner ecosystems, agents handle high-volume security tasks, reduce workloads, and accelerate responses. They learn from feedback and adapt to workflows, boosting efficiency while keeping teams in control.
  • Users interact with agents from within Microsoft Defender, Entra, Intune, Microsoft Purview, and Security Copilot. Users can get started with Security Copilot using Security Compute Units (SCUs).
A man and woman looking at a laptop.
Get started

Empower your security and IT teams

Get started with Security Copilot by signing in to your Azure account, or create a new account for free.
  1. [1]

    New Technology: The Projected Total Economic Impact™ Of Microsoft Security Copilot Cost Savings And Business Benefits Enabled By Security Copilot, commissioned study conducted by Forrester Consulting, November 2024.
     

    To understand benefits, costs, and risks, Forrester interviewed four representatives with experience using Security Copilot at their organizations. Forrester also surveyed 307 security operations decision makers about their use and the projected benefits of Security Copilot. For the purposes of this study, Forrester aggregated the results from these customers into a single composite organization.

Follow Microsoft Security