Microsoft launches new security AI agents to help overworked cyber professionals
The new AI tools will come as a part of a preview in April to help IT teams deal with high-volume security threats
Microsoft is expanding its Security Copilot service with new AI agents to help overworked IT teams deal with surging security threats.
The company is adding 11 agents in total – six developed by Microsoft and five built by its partners – to the Security Copilot as part of an April preview.
The generative AI-powered Security Copilot was launched by Microsoft a year ago as a $4 per hour consumption model (pay-as-you-use). The service was designed to help to improve security outcomes at machine speed and scale, with natural language models.
It can be used as both a standalone experience or in tandem with other products in the Microsoft Security portfolio, such as Microsoft Defender XDR, Microsoft Sentinel, Microsoft Intune, Microsoft Entra, and other third-party services like Red Canary and Jamf.
All the new agents will be focused on helping teams tackle the ever increasing threats they face. Microsoft said they are all purpose-built for security and that they can learn from feedback and adapt to workloads.
What’s more, all 11 are aligned to the tech giant’s Zero Trust framework.
“This is just the beginning; our security AI research is pushing the boundaries of innovation, and we are eager to continuously bring even greater value to our customers at the speed of AI,” Alexander Stojanovic, VP of Microsoft Security AI Applied Research, wrote in a blog post.
Sign up today and you will receive a free copy of our Future Focus 2026 report - the leading resource for IT decision-maker insight on priorities and investment areas in AI, security and more.
The agents will add security ‘Triages’ onto different products, such as a ‘Phishing Triage’ in Microsoft Defender with alerts and simplified explanations for the decisions it makes.
Agents will also offer optimization in different products, such as the ‘Conditional Access Optimization Agent’ which will be deployed in Microsoft Entra.
This, the tech giant revealed, will monitor new users or apps that are not covered by existing policies, and help to identify the need for updates or security gaps they might create – the agent will recommend quick fixes.
Other agents will deal with security information, such as the Threat Intelligence Briefing agent and the Vulnerability Remediation agent.
MORE FROM ITPRO
Bobby Hellard is ITPro's Reviews Editor and has worked on CloudPro and ChannelPro since 2018. In his time at ITPro, Bobby has covered stories for all the major technology companies, such as Apple, Microsoft, Amazon and Facebook, and regularly attends industry-leading events such as AWS Re:Invent and Google Cloud Next.
Bobby mainly covers hardware reviews, but you will also recognize him as the face of many of our video reviews of laptops and smartphones.
-
Post-cloud strategy: Architecting the next enterprise stackAs enterprises rethink their dependence on hyperscale, hybrid architectures are emerging as the new foundation for resilient, AI-ready infrastructure
-
Anthropic just launched Claude Fable 5, its first Mythos-class AI modelNews The launch of Claude Fable 5 marks the first public release of a Mythos-class AI model
-
How Welsh councils are improving services with Microsoft CopilotCase study AI use has reduced staff toil, improved customer service, and increased team collaboration at three Welsh councils
-
‘LLMs are unreliable delegates’: Microsoft researchers say you probably shouldn’t trust AI with work documentsNews A research paper from Microsoft shows AI degrades documents over longer workflows
-
Microsoft joins competitors in handing over AI models for advanced testingNews US and UK government agencies will evaluate the firm's frontier models, along with those from Google and xAI
-
The AI operations gap is reshaping the Microsoft channelHow are AI advancements shaping the moves channel partners are making and need to make going forward?
-
Inforcer launches new Copilot Manager to help MSPs scale AI servicesNews The tool aims to give greater visibility into Copilot usage and shadow AI risks across customer environments
-
Accenture has been trialling Microsoft Copilot since 2023 – now it’s rolling out the AI tool to all 743,000 staffNews Accenture will roll out Microsoft Copilot to nearly three quarters of a million employees after years of testing
-
'That language is no longer reflective of how Copilot is used today': Microsoft says Copilot isn't just for 'entertainment purposes only'News Sharp-eyed users spotted Microsoft describing its Copilot AI as "for entertainment purposes only"
-
‘Fragmentation is poison’: How Microsoft is targeting disparate data to boost AI adoptionNews Amir Netz, the co-creator of Microsoft's Power BI service, tells ITPro that business context is key to effective AI deployment.
