Notice: Security Copilot will be included as part of your Microsoft 365 E5 plan soon

Introduction

Microsoft Security Copilot agents are built into the flow of work of security teams using Microsoft Defender, Microsoft Entra, Microsoft Intune and Microsoft Purview. At Ignite 2025, Microsoft introduced a dozen new agents across these products, bringing agentic defense across workflows to enable autonomous and proactive protection.

To make it easier for teams to get started, Microsoft announced that Security Copilot will be included with Microsoft 365 E5. Eligible tenants will automatically transition to the new entitlement—no action required. 

When this will happen

As part of your existing Microsoft 365 E5 entitlement, you’ll gain access to Security Copilot features and agents through a phased rollout between April 20, 2026, and June 30, 2026. You’ll receive a notification 7 days before your tenant is enabled, and again on the enablement date. 

How this affects your organization 

Your organization will have access to Security Copilot with: 

• 400 Security Compute Units (SCUs) per month per 1,000 user licenses, included with Microsoft 365 E5 (up to 10,000 SCUs/month) 
• Core agentic experiences across Microsoft Entra, Intune, Purview, Defender, and the Security Copilot portal
• Developer tools and APIs for custom agents and integrations 

• Sentinel data lake compute or storage costs 
• Non-agentic Data Security Investigations experience in Microsoft Purview 
• Charges for Azure Logic Apps for usage with Security Copilot 
• Third-party agent licensing paid via Security Store 

We recommend:

• Signing up for the Security Copilot skilling series.
• Reviewing new agentic scenarios and developer capabilities in the Security Copilot Adoption Hub.
• Reviewing the documentation for details on what’s included.  
• Requesting assistance from a Microsoft 365 FastTrack specialist to unlock the full value of Security Copilot