Microsoft to Launch New Security Copilot Agents Next Month

Microsoft announced today new Security Copilot AI agents designed to help organizations address cybersecurity threats. The new AI agents follow the launch of Microsoft Security Copilot (previously known as “Microsoft Copilot for Security”) a year ago, which introduced a generative AI-powered security solution that integrates with other Microsoft security offerings and other products third-party security vendors.

The new Security Copilot AI agents Microsoft is announcing today include six in-house agents and five created by the company’s security partners. “Purpose-built for security, agents learn from feedback, adapt to workflows, and operate securely—aligned to Microsoft’s Zero Trust framework,” explained Vasu Jakkal, Corporate Vice President, Microsoft Security. “With security teams fully in control, agents accelerate responses, prioritize risks, and drive efficiency to enable proactive protection and strengthen an organization’s security posture.”

Microsoft’s own Security Copilot agents include Alert Triage agents in Microsoft Purview, a Phishing Triage agent in Microsoft Defender, a Conditional Access Optimization agent in Microsoft Entra, a Vulnerability Remediation agent in Microsoft Intune, and a Threat Intelligence Briefing agent in Security Copilot. The other agentic solutions from third-party security partners include a Privacy Breach Response agent by OneTrust, a Network Supervisor agent by Aviatrix, a SecOps Tooling agent by BlueVoyant, an Alert Triage agent by Tanium, and a Task Optimizer agent by Fletch

These new Security Copilot agents will launch in preview next month for organizations already using Microsoft’s generative AI-powered security solution. You can learn more details about how these AI agentic capabilities work in this separate blog post.

Lastly, Microsoft also announced today that it’s bringing new protections against phishing attacks in Microsoft Teams. Starting next month, the app will automatically protect users against malicious URLs and attachments. Teams will also make it possible for users to report suspicious messages, including from external users to their security teams.