Kurt Shintaku's Blog

If you’ve been watching to the announcements coming out of Microsoft Ignite 2025, there was a pretty big announcement made during the opening keynote for customers that have licensed Microsoft 365 E5:

• Security Copilot capacity is available at NO ADDITIONAL COST for Microsoft 365 E5 licensed customers
  https://www.microsoft.com/en-us/security/blog/2025/11/18/agents-built-into-your-workflow-get-security-copilot-with-microsoft-365-e5/?msockid=06377db5fd83631014c06baefce96218

What is Security Copilot?
Security Copilot s a generative AI-powered security solution that helps increase the efficiency and capabilities of defenders to improve security outcomes at machine speed and scale.

Security Copilot provides a natural language, assistive copilot experience. Security Copilot helps support security professionals in various end-to-end scenarios such as incident response, threat hunting, intelligence gathering, posture management, and more. For more information, see Security Copilot primary use cases.

Here’s an explanation of how Security Copilot works:

• User prompts from security products are sent to Security Copilot.
• Security Copilot then preprocesses the input prompt through an approach called grounding, which improves the specificity of the prompt to help you get answers that are relevant and actionable to your prompt. Security Copilot accesses plugins for preprocessing, then sends the modified prompt to the language model.
• Security Copilot takes the response from the language model and post-processes it. This post-processing includes accessing plugins to gain contextualized information.
• Security Copilot returns the response, where the user can review and assess the response.

Security Copilot iteratively processes and orchestrates these sophisticated services to help produce results that are relevant to your organization because they’re contextually based on your organizational data.

Details on the new Security Copilot inclusion in Microsoft 365 E5
For more information on the NEW benefit available from Microsoft 365 E5:

• Microsoft 365 Message Center post:
  MC1187672 – Get ready for security agents: Microsoft Security Copilot will be included in Microsoft 365 E5 | Microsoft 365 Message Center Archive
• Frequently Asked Questions:
  FAQ: Security Copilot inclusion in Microsoft 365 E5 subscription
  It answers:
  • What capacity is included?
  • Is there an example of SCU consumption under current provisioned vs inclusion models?
  • What happens if a customer exceeds the included SCUs?
  • Where can customers track their usage?
  • What capabilities are included?
  • What isn’t covered as part of this inclusion?
  • …
• Tools
  • “Security Compute Unit Calculator” for Security Architects
    The SCU calculator helps estimate your organization’s SCU capacity needs:  Microsoft Security Copilot Security Compute Unit Calculator
  • “Security Copilot Adoption Site” for IT Professionals
    The Adoption site provides scenarios of usage for Security Copilot:  Microsoft Security Copilot – Microsoft Adoption
• Training (FREE)
  • Course SC-5006-A: Enhance security operations by using Microsoft Security Copilot
    https://learn.microsoft.com/en-us/training/courses/sc-5006
  • How to Become a Microsoft Security Copilot Ninja: The Complete Level 400 Training
    https://techcommunity.microsoft.com/blog/securitycopilotblog/how-to-become-a-microsoft-security-copilot-ninja-the-complete-level-400-training/4106928

Video Explanation of the Security Copilot for Microsoft 365 E5 offer
As you can imagine, this got a lot of gasps and applause/cheers during the Ignite keynote.  Here’s a 3^rd party video on the new offer from Rio, a Microsoft MVP for Cloud Security:

• RioCloudSync – “Security Copilot Now Included with Microsoft 365 E5″
  https://www.youtube.com/watch?v=cLdMmxEG9SQ

What about GCC/Microsoft 365 G5 customers?
We are committed to making this available to our G5 licensees as well however an exact timeframe has not been announced.