Favorite your Message Center and Roadmap items. Access them anytime via your Profile. Export and share with your team or your LLM.

Notice: Security Copilot will be included as part of your Microsoft 365 E5 plan soon

Message ID
MC1261596
View in Message Center
Services
Microsoft EntraMicrosoft IntuneMicrosoft Defender XDRMicrosoft Purview
Category
Stay Informed
Tags
New featureUser impactAdmin impact
Rollout
April 2026May 2026June 2026

Summary

Security Copilot will be included with Microsoft 365 E5 via a phased rollout from April 20 to June 30, 2026, providing 400 Security Compute Units per 1,000 users and core agentic features across Microsoft security products. Additional advanced capabilities may incur extra costs.

Details

Introduction

Microsoft Security Copilot agents are built into the flow of work of security teams using Microsoft Defender, Microsoft Entra, Microsoft Intune and Microsoft Purview. At Ignite 2025, Microsoft introduced a dozen new agents across these products, bringing agentic defense across workflows to enable autonomous and proactive protection.

To make it easier for teams to get started, Microsoft announced that Security Copilot will be included with Microsoft 365 E5. Eligible tenants will automatically transition to the new entitlement—no action required. 

When this will happen

As part of your existing Microsoft 365 E5 entitlement, you’ll gain access to Security Copilot features and agents through a phased rollout between April 20, 2026, and June 30, 2026. You’ll receive a notification 7 days before your tenant is enabled, and again on the enablement date. 

How this affects your organization 

Your organization will have access to Security Copilot with: 

  • 400 Security Compute Units (SCUs) per month per 1,000 user licenses, included with Microsoft 365 E5 (up to 10,000 SCUs/month) 
  • Core agentic experiences across Microsoft Entra, Intune, Purview, Defender, and the Security Copilot portal
  • Developer tools and APIs for custom agents and integrations 
Note: Any capabilities beyond those that are part of the core Security Copilot value will require additional payment. For example: 

  • Sentinel data lake compute or storage costs 
  • Non-agentic Data Security Investigations experience in Microsoft Purview 
  • Charges for Azure Logic Apps for usage with Security Copilot 
  • Third-party agent licensing paid via Security Store 

We recommend:

Change History

Show
No change history available

Never Miss a Microsoft 365 Update

Join thousands of IT professionals who rely on DeltaPulse for real-time Microsoft 365 change intelligence, automated notifications, and community insights.