MC1261596 - Notice: Security Copilot will be included as part of your Microsoft 365 E5 plan soon

Service

Microsoft Entra
Microsoft Intune
Microsoft Defender XDR
Microsoft Purview

Published

Mar 25, 2026

Tag

New feature
User impact
Admin impact

Summary

Security Copilot will be included with Microsoft 365 E5 via a phased rollout from April 20 to June 30, 2026, providing 400 Security Compute Units per 1,000 users and core agentic features across Microsoft security products. Additional advanced capabilities may incur extra costs.

More information

Introduction

Microsoft Security Copilot agents are built into the flow of work of security teams using Microsoft Defender, Microsoft Entra, Microsoft Intune and Microsoft Purview. At Ignite 2025, Microsoft introduced a dozen new agents across these products, bringing agentic defense across workflows to enable autonomous and proactive protection.

To make it easier for teams to get started, Microsoft announced that Security Copilot will be included with Microsoft 365 E5. Eligible tenants will automatically transition to the new entitlement—no action required. 

When this will happen

As part of your existing Microsoft 365 E5 entitlement, you’ll gain access to Security Copilot features and agents through a phased rollout between April 20, 2026, and June 30, 2026. You’ll receive a notification 7 days before your tenant is enabled, and again on the enablement date. 

How this affects your organization 

Your organization will have access to Security Copilot with: 

  • 400 Security Compute Units (SCUs) per month per 1,000 user licenses, included with Microsoft 365 E5 (up to 10,000 SCUs/month) 
  • Core agentic experiences across Microsoft Entra, Intune, Purview, Defender, and the Security Copilot portal
  • Developer tools and APIs for custom agents and integrations 
Note: Any capabilities beyond those that are part of the core Security Copilot value will require additional payment. For example: 

  • Sentinel data lake compute or storage costs 
  • Non-agentic Data Security Investigations experience in Microsoft Purview 
  • Charges for Azure Logic Apps for usage with Security Copilot 
  • Third-party agent licensing paid via Security Store 

We recommend: