Microsoft announced today its new Microsoft Security Copilot, which will leverage AI to improve security work. Microsoft Security Copilot is a new AI-based chat tool for cybersecurity professionals who can ask it questions about their security environment and better understand potential threats. The Security Copilot also integrates with other security products from Microsoft such as Microsoft Defender and Microsoft Sentinel.
Just like Microsoft’s other “Copilot” products, the Security Copilot leverages generative AI technology from OpenAI’s GPT-4. However, it also uses a “security-specific model” from Microsoft that can incorporate the 65 trillion security signals that the company identifies every day.
The AI-based tool will be able to help security teams identify what’s happening in their environment, but what makes it pretty unique is that it also has learning capabilities. “Our cyber-trained model adds a learning system to create and tune new skills. Security Copilot then can help catch what other approaches might miss and augment an analyst’s work. In a typical incident, this boost translates into gains in the quality of detection, speed of response and ability to strengthen security posture,” explained Vasu Jakkal, CVP, Security, Compliance, Identity, and Management.
The exec acknowledged that “Security Copilot doesn’t always get everything right,” but Microsoft has built a feedback feature directly into the tool. “As we continue to learn from these interactions, we are adjusting its responses to create more coherent, relevant and useful answers,” Jakkal said.
Microsoft also promises that its new Security Copilot will deliver generative AI capabilities to security teams in a responsible way. Microsoft won’t be using customer data to train its AI models, and the company also says customer data is “protected at every step by the most comprehensive enterprise compliance and security controls in the industry.”
Microsoft Security Copilot is currently available in private preview, and the company has yet to announce when it will start expanding access to it.