Explore the latest in AI-powered cybersecurity capabilities announced at Microsoft Secure. Watch on demand > Read the announcement >
Microsoft copilot for security
Microsoft copilot for security
Overview
Protect at the speed and scale of AI
- Summarize vast data signals into key insights to cut through the noise, detect cyberthreats before they cause harm, and reinforce your security posture.Put critical guidance and context at security teams’ fingertips so they can respond to incidents in minutes instead of hours or days.Empower and advance the work of junior staff through step-by-step guidance and alleviate tedious tasks for senior staff so they can focus on strategic priorities.
- Learn how tailored, security-specific capabilities and a specialized language model help you gain the advantage against cyberattackers.Learn how Copilot for Security enriches and summarizes data from your security tools to accelerate an investigation.See how security and IT teams can use Copilot natively embedded in tools like Microsoft Defender XDR.
How Copilot works
This diagram provides a simplified look at what happens behind the scenes in Copilot for Security when you submit a prompt. First, the Copilot orchestrator determines the context and builds the plan using the skills available with Copilot. Then it executes the plan and gathers all the necessary content and data. Next, it combines that data and context, formats the data, works out a response, and delivers that response. This process can happen in just seconds.
Scenarios
Turn questions into action
Ask Copilot for Security questions in natural language and receive actionable responses to common security and IT tasks in seconds.
Unified security operations platform
Outpace cyberthreats with XDR and SIEM, all in one platform—available with Copilot embedded.
Microsoft Sentinel
Collect security data and correlate alerts from virtually any source with intelligent security analytics.
Microsoft Defender XDR
Help prevent and detect cross-domain cyberattacks at the speed of AI—available with Copilot embedded.
Microsoft Intune
Mitigate cyberthreats to devices, protect data, and improve compliance across clouds— available with Copilot embedded.
Microsoft Defender Threat Intelligence
Understand cyberthreats and expose suspicious infrastructure with threat intelligence—included with Copilot.
Microsoft Entra
Help protect any identity and secure access to any resource with one family of solutions—available with Copilot embedded.
Microsoft Purview
Explore governance, protection, and compliance solutions for your data—available with Copilot embedded.
Microsoft Defender External Attack Surface Management
See your rapidly changing, global external cyberattack surface in real time—available with Copilot embedded.
Microsoft Defender for Cloud
Understand multicloud risk and get remediation recommendations—available with Copilot embedded.
Unified security operations platform
Outpace cyberthreats with XDR and SIEM, all in one platform—available with Copilot embedded.
Unified security operations platform
Microsoft Sentinel
Collect security data and correlate alerts from virtually any source with intelligent security analytics.
Microsoft Intune
Mitigate cyberthreats to devices, protect data, and improve compliance across clouds—available with Copilot embedded.
Microsoft Intune
Microsoft Defender Threat Intelligence
Understand cyberthreats and expose suspicious infrastructure with threat intelligence—included with Copilot.
Microsoft Defender XDR
Help prevent and detect cross-domain cyberattacks at the speed of AI—available with Copilot embedded.
Microsoft Defender XDR
Microsoft Entra
Help protect any identity and secure access to any resource with one family of solutions—available with Copilot embedded.
Microsoft Entra
Microsoft Purview
Explore governance, protection, and compliance solutions for your data—available with Copilot embedded.
Microsoft Defender External Attack Surface Management
See your rapidly changing, global external cyberattack surface in real time—available with Copilot embedded.
Microsoft Defender for Cloud
Understand multicloud risk and get remediation recommendations—available with Copilot embedded.
Microsoft Defender for Cloud
Perform SOC tasks faster with Copilot</h2> ">
Perform SOC tasks faster with Copilot
Studies of productivity with Copilot demonstrated greater speed and accuracy for novice and professional security analysts.
Security pros were up to 22% faster across all tasks
Security novices were 44% more accurate on tasks
More than 93% of users wanted to use Copilot again
Pricing
Copilot for Security pricing
Get started easily with provisioned, pay-as-you-go pricing.
Customer stories
What customers are saying
Learn how the team at Enverus saved hours per day on low-value tasks with Copilot for Security, allowing them to refocus on strategic work and elevate the impact of their security team.
See how Avanade used Copilot for Security to help junior analysts build knowledge and skills while saving senior staff valuable time.
“I envision [Copilot for Security] as a change accelerator. The ability to do threat hunting at pace will mean that I’m able to reduce my mean time to investigate.“
Paul Haywood, Chief Information Security Officer, WTW
“Copilot can democratize security to the end user. The average analyst training time used to be a couple of months, and that can reduce drastically if you’re using Copilot.”
Chandan Pani, Chief Information Security Officer, LTIMindtree
“We are excited about what we have seen from Microsoft on [Copilot for Security]. These capabilities can help companies stay ahead of future threats.”
Jeremy J. Hyland, Director of Cyber Defense, Dow Inc.
"Microsoft Copilot for Security is going to expose our student employees to a cutting-edge security tool that they wouldn't have gotten access to in any other way."
David McMorries, Chief Information Security Officer, OSU
The power of microsoft security copilot
AI for security and beyond</h2> ">
AI for security and beyond
Responsible AI
AI with built-in data security
Data provided to Copilot is protected by industry-leading compliance and security controls.
Resource center
Get the latest on threat protection
Learn how AI fortifies integrated cyberthreat protection with webcasts, e-books, and analyst reports.
Blog post
See what’s new in Copilot
Get the latest news about features, partners, and research from the Copilot general availability launch.
Webinars
Get an introduction to Copilot
Learn the basics about generative AI and some best practices to get started with Copilot.
AI at Microsoft
Lead the way with AI
Embrace the future of productivity and innovation with AI features built into Microsoft tools and services.
Infographic
See the top 10 recommended prompts
Get started with prompts for Copilot that can help answer your security questions.
Learn Live
Join the live learning experience
Explore generative AI and Copilot fundamentals. Gain free access with your Microsoft account.
Video series
See how our teams use Copilot
Read and watch how Defender Experts save time and upskill their team with Copilot.
Frequently asked questions
- Copilot for Security is an AI cybersecurity product that enables security professionals to respond to cyberthreats quickly, process signals at machine speed, and assess risk exposure in minutes.
- Copilot for Security is the only security AI product that combines a specialized language model with security-specific capabilities from Microsoft. These capabilities incorporate a growing set of security-specific skills informed by our unique global threat intelligence and more than 65 trillion daily signals.
- Yes, Copilot is now generally available for use by security and IT teams. Contact Sales to get started.
- Yes. Copilot integrates with other Microsoft Security products, including but not limited to Microsoft Defender XDR, Microsoft Sentinel, Microsoft Intune, Microsoft Entra, Microsoft Purview, Microsoft Defender for Cloud, and Microsoft Defender External Attack Surface Management. It also integrates with Azure security tools including Azure Web Application Firewall (WAF) and Azure Firewall. Copilot uses the data and signals from these products to generate customized guidance.
- Yes. Copilot has integrations with other ISVs to provide plugins and promptbooks to extend the insights customers get from the product. View a list of partners that integrate with Copilot.
- The only prerequisite for Copilot for Security is an Azure account. However, organizations get the most value from Copilot when connected to their security data. We recommend connecting your Microsoft Security tools and integrating your other security tools to have the best experience and get the most value from Copilot.
Get started
Protect everything
Make your future more secure. Explore your security options today.
Follow Microsoft