Security Copilot is now included as part of your Microsoft 365 E5/E7 plan

[What and Why]

Microsoft Security Copilot agents are built into the flow of work of security teams using Microsoft Defender, Microsoft Entra, Microsoft Intune and Microsoft Purview. At Ignite 2025, Microsoft introduced a dozen new agents across these products, bringing agentic defense across workflows to enable autonomous and proactive protection. 

[Rollout Schedule]

Global: We will begin rolling out on mid-August 2026 and expect to complete by mid-August 2026.

[Impact on Your Organization]

Who is affected:

• Organizations with Microsoft 365 E5 or E7

Platforms/Services:

• Defender
• Entra
• Intune
• Purview
• Security Copilot portal

What will happen:

• Security Copilot will be automatically included with Microsoft 365 E5/E7 (no separate purchase required).
• Your tenant will receive 400 Security Compute Units (SCUs) per month per 1,000 licensed users, up to 10,000 SCUs per month.
• Core agentic security experiences will be available across Defender, Entra, Intune, Purview, and the Security Copilot portal.
• Developer tools and APIs will be available to build custom agents and integrations.
• Existing security, compliance, and access policies continue to apply.
• Additional capabilities outside the included entitlement may incur extra charges, including:
  • Microsoft Sentinel data lake compute or storage.
  • Non-agentic Data Security Investigations in Purview.
  • Azure Logic Apps usage with Security Copilot.
  • Third-party agents purchased via Microsoft Security Store.

[Action Required / Recommendations]

No action is required to enable this feature.

We recommend:

• Reviewing new agentic scenarios and capabilities in the Security Copilot Adoption Hub.
• Reviewing the documentation for details on what’s included.
• Requesting assistance from a Microsoft 365 FastTrack specialist to unlock the full value of Security Copilot.
• Exploring Microsoft and partner-published agents in Microsoft Security Store, also accessible within Microsoft Defender and Entra. 

If you would like to opt out of this entitlement, please contact support.

[Compliance considerations]

Area	Explanation
Introduces or significantly modifies AI/ML or agent capabilities	Security Copilot introduces agentic AI experiences that analyze and act on security signals within Defender, Entra, Intune, and Purview, governed by existing tenant controls.
New way for users to interact with generative AI	Security admins can interact with generative AI through Security Copilot prompts and agents within supported security workloads.
Adds integration to 3rd‑party software products	Optional third-party agents may be installed via Microsoft Security Store and may require separate licensing.