Microsoft Security Copilot: Coming to Microsoft 365 E5

Big news for E5 customers! Microsoft has officially announced that Security Copilot will be included in Microsoft 365 E5 licenses starting later this year. This is a major step forward in making AI-driven security agents accessible to security teams.
So, what is Security Copilot, and why should you care?
Security Copilot is Microsoft’s AI-powered assistant in tools like Defender and Sentinel. It works seamlessly helping you to investigate incidents faster, summarize alerts, generate KQL queries, and even draft incident reports. It’s like adding an experienced analyst to your team, make time to investigate alers a lot shorter.
Until now, Security Copilot was available as a standalone product, but now, it’ll be a built-in value for Microsoft 365 E5 customers. If you're already invested in the Microsoft ecosystem, this is a huge productivity win.
Why you should use Security Copilot?
- Speeds up detection and response with AI-generated summaries and recommendations.
- Helps investigate security incidents.
- Enhances threat intelligence and incident triage with minimal manual effort.
- Fully integrated with tools you're already using, like Defender, Sentinel and Intune.
And the best part? No extra license needed if you’re on E5.
If you're not on E5 yet, this might just be the final nudge you need. And if you are, it’s time to start preparing your team for how to make the most of Security Copilot once it's fully rolled out.
Keep reading
11 Sept 2026
You Can Now Build Apps with Copilot Cowork and Copilot Studio
Have an idea for an internal app? Explore app building in Copilot Cowork and Copilot Studio, with a practical starter prompt and the checks IT should make first.
1 Sept 2026
Microsoft's Responsible AI Report: What You Still Need to Govern Yourself
Microsoft's 2026 Responsible AI Transparency Report explains its own governance work. Customers still need owners, approved use cases, evaluation and monitoring.
5 Aug 2026
Copilot Domain Exclusion: What Changed and What Admins Should Check
Domain Exclusion gives admins more control over web grounding, but its rollout changed. Here is the difference between the control and disabling web search entirely.
Comments
Loading comments…