Security Copilot will be included with Microsoft 365 E5 via a phased rollout from April 20 to June 30, 2026, providing 400 Security Compute Units per 1,000 users and core agentic features across Microsoft security products. Additional advanced capabilities may incur extra costs.
Introduction
Microsoft Security Copilot agents are built into the flow of work of security teams using Microsoft Defender, Microsoft Entra, Microsoft Intune and Microsoft Purview. At Ignite 2025, Microsoft introduced a dozen new agents across these products, bringing agentic defense across workflows to enable autonomous and proactive protection.
To make it easier for teams to get started, Microsoft announced that Security Copilot will be included with Microsoft 365 E5. Eligible tenants will automatically transition to the new entitlement—no action required.
When this will happen
As part of your existing Microsoft 365 E5 entitlement, you’ll gain access to Security Copilot features and agents through a phased rollout between April 20, 2026, and June 30, 2026. You’ll receive a notification 7 days before your tenant is enabled, and again on the enablement date.
How this affects your organization
Your organization will have access to Security Copilot with:
We recommend: