Microsoft just made one of the biggest changes yet to how organizations can experience AI-powered security.
Security Copilot, the generative AI assistant built into Microsoft’s security stack, is now included with Microsoft 365 E5 licensing.
This update means every E5 customer automatically gains access to Security Copilot with a monthly allocation of Security Compute Units (SCUs) that scales with user count.
Previously, adoption was limited by unpredictable pricing—organizations had to buy expensive compute units upfront. Now, all E5 customers can experiment with AI-assisted detection, investigation, and response at no additional cost.
In short, what was once a premium add-on is now a built-in capability.
This inclusion is more than a licensing update—it’s a strategic shift that makes AI-driven security practical for enterprises of every size.
Security Copilot is now part of your existing E5 investment. The monthly SCU pool provides cost predictability and simplifies budgeting, removing the uncertainty of pay-per-use pricing.
Included | Not Included |
Monthly SCU pool (based on user count) | Extra SCU beyond the included pool |
Core agent experiences in Defender, Entra, Intune, Purview | Azure Logic Apps usage |
Access to the Security Copilot portal | Microsoft Sentinel data lake compute or storage |
Developer tools like Agent Builder and APIs | Third-party and partner license fees |
Partner-built agents (subject to license terms) | Non-agent Purview experiences |
With the licensing barrier gone, the next step is execution. Here’s a focused 90-day approach for E5 organizations.
Goal: Ensure your environment is secure, integrated, and ready for AI-driven insights.
Select two or three clear, measurable scenarios:
Define success metrics such as reduction in response time or manual investigation effort.
By day 90, you should know which use cases deliver the most value and how to scale them across your security operations.
At Netrix Global, we see this announcement as a major turning point for E5 customers looking to modernize their security programs with AI.
We help enterprises move from entitlement to impact through three structured services:
We assess your Defender, Entra, Intune, Purview, and Sentinel environments to ensure Security Copilot can access high-quality signals. We then map where Copilot can add immediate value.
Our experts work with your analysts to build promptbooks and playbooks that align AI automation with your organization’s processes and risk profile.
We train teams to use Copilot responsibly, measure results, and continuously optimize as Microsoft adds new agents and capabilities.
The goal is simple: help your security operations gain speed and confidence without adding risk.
The inclusion of Security Copilot with Microsoft 365 E5 marks a new era for enterprise security.
AI-assisted defense is now a standard part of the Microsoft security experience—ready for any E5 customer to activate and use.
If you already own E5, you have everything you need to start experimenting with AI-driven security today.
Contact Netrix Global to learn how to activate and scale Security Copilot across your organization.
Microsoft began rolling out the inclusion in November 2025. Tenants receive a 30-day notice before activation.
You receive 400 SCUs per 1,000 E5 users each month, up to a maximum of 10,000 SCUs. This allocation resets monthly.
Yes. Microsoft plans to offer a pay-as-you-go option for additional capacity in the future.
Microsoft has stated that Security Copilot follows the same data residency and compliance rules as other Microsoft 365 services. Customers should review Microsoft’s privacy documentation for details.
No. It acts as an AI assistant—enhancing analyst productivity and decision-making, not replacing human judgment.
Netrix Global offers readiness assessments, promptbook design, and ongoing enablement to help E5 customers operationalize Security Copilot quickly and securely.
