MC1187672 – Get ready for security agents: Microsoft Security Copilot will be included in Microsoft 365 E5

Product:

Copilot, Defender, Defender XDR, Entra, Intune, Purview

Platform:

Developer, Online, World tenant

Status:

Change type:

New feature, User impact, Admin impact

Links:

Details:

Summary:
Microsoft Security Copilot is now included at no extra cost in Microsoft 365 E5, providing integrated AI-driven security agents across Defender, Entra, Intune, and Purview. Customers receive monthly Security Compute Units based on user count, with phased rollout and admin controls via Entra ID group membership.

Details:
Introduction:
Microsoft Security Copilot agents are directly built into the flow of work for security teams in Microsoft Defender, Microsoft Entra, Microsoft Intune and Microsoft Purview. Today, we are introducing a dozen new agents across these products, to bring agentic defense across workflows, enabling adaptive protection.
To make the agents easily accessible and help security teams get started more quickly, we are excited to announce that Security Copilot will be included in your Microsoft 365 E5 plan as part of your core entitlement with no additional cost*. No provisioning or licensing changes are required. Rollout starts today with existing Security Copilot customers with Microsoft 365 E5 and will continue for all Microsoft 365 E5 customers in the upcoming months.
When this will happen
Microsoft 365 E5 customers who already have Security Copilot can get started today with this entitlement.
All other Microsoft 365 E5 customers can get access to Security Copilot as part of a phased rollout in the upcoming months, with notifications sent 30 days prior to activation.

Change Category:
XXXXXXX ... free basic plan only

Scope:
XXXXXXX ... free basic plan only

Release Phase:

Created:
2025-11-19

updated:
2025-11-19

Task Type

XXXXXXX ... free basic plan only

Docu to Check

XXXXXXX ... free basic plan only

MS How does it affect me

XXXXXXX ... free basic plan only

MS Preperations

XXXXXXX ... free basic plan only

MS Urgency

XXXXXXX ... free basic plan only

MS workload name

XXXXXXX ... free basic plan only

summary for non-techies**

XXXXXXX ... free basic plan only

Direct effects for Operations**

Increased Security Complexity
The introduction of Security Copilot may lead to increased complexity in security operations, requiring additional training and adaptation from security teams to effectively utilize the new AI-driven tools.
   - roles: Security Analyst, IT Administrator
   - references: https://learn.microsoft.com/copilot/security/security-copilot-inclusion, https://adoption.microsoft.com/en-us/security-copilot" target="_blank" rel="nofollow noopener noreferrer">https://adoption.microsoft.com/en-us/security-copilot/

Potential User Resistance
Users may resist adopting the new AI-driven features due to unfamiliarity or perceived threats to their job security, leading to decreased productivity and morale.
   - roles: End User, Security Team Member
   - references: https://adoption.microsoft.com/en-us/security-copilot" target="_blank" rel="nofollow noopener noreferrer">https://adoption.microsoft.com/en-us/security-copilot/, https://learn.microsoft.com/copilot/security/security-copilot-inclusion " target="_blank" rel="nofollow noopener noreferrer">https://learn.microsoft.com/copilot/security/security-copilot-inclusion

Data Privacy Concerns
The integration of AI capabilities may raise concerns regarding data privacy and compliance, especially if users are not adequately informed about how their data is being used by the new tools.
   - roles: Compliance Officer, Data Protection Officer
   - references: https://learn.microsoft.com/copilot/security/security-copilot-inclusion, https://adoption.microsoft.com/en-us/security-copilot" target="_blank" rel="nofollow noopener noreferrer">https://adoption.microsoft.com/en-us/security-copilot/

Configutation Options**

XXXXXXX ... paid membership only

Opportunities**

Enhanced Security Incident Response
With the integration of Security Copilot into Microsoft 365 E5, security teams can leverage AI-driven insights to respond to incidents more effectively and quickly. This will streamline the incident response process, reducing the time taken to identify and mitigate threats.
   - next-steps: Train security teams on utilizing Security Copilot's features and AI capabilities to enhance their incident response workflows. Develop standard operating procedures that incorporate the use of Security Copilot.
   - roles: Security Analysts, IT Security Managers, Incident Response Teams
   - references: https://learn.microsoft.com/copilot/security/security-copilot-inclusion" target="_blank" rel="nofollow noopener noreferrer">https://learn.microsoft.com/copilot/security/security-copilot-inclusion, https://security.microsoft.com

Automated Compliance Monitoring
The inclusion of Security Copilot can facilitate automated compliance checks and reporting through Microsoft Purview. This helps organizations maintain regulatory compliance and reduces the manual effort required for compliance audits.
   - next-steps: Set up compliance monitoring dashboards using Security Copilot within Microsoft Purview. Schedule regular reviews of compliance reports generated by the system.
   - roles: Compliance Officers, IT Administrators, Data Protection Officers
   - references: https://purview.microsoft.com, https://learn.microsoft.com/copilot/security/security-copilot-inclusion" target="_blank" rel="nofollow noopener noreferrer">https://learn.microsoft.com/copilot/security/security-copilot-inclusion

Streamlined User Access Management
Utilizing Security Copilot's capabilities in Microsoft Entra can optimize user access management processes, making it easier to manage user permissions and access rights across various applications and services.
   - next-steps: Evaluate current user access policies and identify areas for improvement using Security Copilot's insights. Implement automated workflows for user provisioning and deprovisioning based on role-based access controls.
   - roles: IT Administrators, Identity and Access Managers, Security Officers
   - references: https://entra.microsoft.com, https://learn.microsoft.com/copilot/security/security-copilot-inclusion" target="_blank" rel="nofollow noopener noreferrer">https://learn.microsoft.com/copilot/security/security-copilot-inclusion

Potentional Risks**

XXXXXXX ... paid membership only

IT Security**

XXXXXXX ... paid membership only

explanation for non-techies**

XXXXXXX ... free basic plan only