Microsoft Security Copilot
AI Agents & Automation
Overview
Microsoft Security Copilot is a generative AI assistant that provides natural-language security investigation across Microsoft Defender, Sentinel, Entra, and Intune. It enables security analysts to ask questions in plain English, generate incident summaries, create KQL queries, reverse-engineer attack notes, and receive recommended response actions. Security Copilot leverages Microsoft's extensive security telemetry and threat intelligence to provide context-aware investigation, helping SOC teams work more efficiently and reduce the time spent on manual analysis.
- Pricing model
- Subscription
- Deployment
- SaaS (vendor-hosted)
- Regions served
- Global
- Categories
- Language (LLM / NLP), Assistant / agent product, Subscription, Software & technology, Cyber threat detection & response, Infrastructure, network & endpoint security, Compliance monitoring, SaaS (vendor-hosted), AI Agents & Automation, Agentic / autonomous, Enterprise / custom quote
- Last updated
- 2 October 2026
- Published
- 2 October 2026
Use cases
Deployment options
Data sources & provenance
Where this information came from, how it was checked and when it was last looked at. “Last updated” records a change to the record — it does not mean the record was verified.
- Data quality
- Data quality: Editorially Reviewed
- Primary source
- microsoft.com
- Sources cited
- 2
- Last reviewed
- 27 September 2026
- Last updated
- 2 October 2026
Spotted something out of date?
Anyone can suggest a correction — you don't need an account. An editor checks every suggestion against the sources before the record changes.