{"id":93240,"date":"2026-01-30T06:00:25","date_gmt":"2026-01-30T00:30:25","guid":{"rendered":"https:\/\/exigotech.co\/au\/blog\/auto-draft"},"modified":"2026-01-29T16:46:44","modified_gmt":"2026-01-29T11:16:44","slug":"microsoft-security-copilot-included-microsoft-365-e5","status":"publish","type":"post","link":"https:\/\/exigotech.co\/in\/blog\/microsoft-security-copilot-included-microsoft-365-e5","title":{"rendered":"Microsoft Security Copilot Now Included with Microsoft 365 E5: What It Means for Your Cybersecurity Team"},"content":{"rendered":"<p>In a major shift for enterprise security, Microsoft has announced that Microsoft Security Copilot, its AI-powered security assistant, is now included with Microsoft 365 E5 licences at no extra cost starting in November 2025.<\/p>\n<p>This change makes advanced AI security capabilities more accessible for organisations that already invest in Microsoft 365 E5, helping security teams work smarter and faster with built-in AI support for threat detection, investigation, and response.<\/p>\n<p>In this blog, we will discuss what\u2019s changed, why it matters, and how organisations can get value from this inclusion.<script type=\"application\/ld+json\">\n{\n  \"@context\": \"https:\/\/schema.org\",\n  \"@type\": \"FAQPage\",\n  \"mainEntity\": [\n    {\n      \"@type\": \"Question\",\n      \"name\": \"Is Microsoft Security Copilot included with Microsoft 365 E5?\",\n      \"acceptedAnswer\": {\n        \"@type\": \"Answer\",\n        \"text\": \"Yes. Microsoft Security Copilot is included with Microsoft 365 E5 licences at no additional cost starting November 2025.\"\n      }\n    },\n    {\n      \"@type\": \"Question\",\n      \"name\": \"When will Microsoft Security Copilot be activated for E5 tenants?\",\n      \"acceptedAnswer\": {\n        \"@type\": \"Answer\",\n        \"text\": \"Microsoft will provide at least 30 days\u2019 advance notice before Security Copilot is activated in an organisation\u2019s tenant.\"\n      }\n    },\n    {\n      \"@type\": \"Question\",\n      \"name\": \"What are Security Compute Units (SCUs)?\",\n      \"acceptedAnswer\": {\n        \"@type\": \"Answer\",\n        \"text\": \"Security Compute Units (SCUs) measure the AI compute capacity used by Microsoft Security Copilot for tasks like alert summarisation, investigation, and analysis.\"\n      }\n    },\n    {\n      \"@type\": \"Question\",\n      \"name\": \"How many SCUs are included with Microsoft 365 E5?\",\n      \"acceptedAnswer\": {\n        \"@type\": \"Answer\",\n        \"text\": \"Microsoft 365 E5 customers receive 400 SCUs per month for every 1,000 E5 users, scaling proportionally up to 10,000 SCUs for large tenants.\"\n      }\n    },\n    {\n      \"@type\": \"Question\",\n      \"name\": \"Which Microsoft security tools integrate with Security Copilot?\",\n      \"acceptedAnswer\": {\n        \"@type\": \"Answer\",\n        \"text\": \"Security Copilot integrates with Microsoft Defender, Microsoft Entra, Microsoft Intune, Microsoft Purview, and the standalone Security Copilot portal.\"\n      }\n    },\n    {\n      \"@type\": \"Question\",\n      \"name\": \"Is Microsoft Security Copilot included with Microsoft 365 E3?\",\n      \"acceptedAnswer\": {\n        \"@type\": \"Answer\",\n        \"text\": \"No. The inclusion of Microsoft Security Copilot applies only to Microsoft 365 E5 licences and does not automatically include E3 licences.\"\n      }\n    },\n    {\n      \"@type\": \"Question\",\n      \"name\": \"Can organisations purchase additional SCUs?\",\n      \"acceptedAnswer\": {\n        \"@type\": \"Answer\",\n        \"text\": \"Yes. Organisations can purchase additional Security Compute Units on a pay-as-you-go basis if they need more capacity beyond the included monthly allocation.\"\n      }\n    },\n    {\n      \"@type\": \"Question\",\n      \"name\": \"Does Microsoft 365 E5 include custom Copilot agents and APIs?\",\n      \"acceptedAnswer\": {\n        \"@type\": \"Answer\",\n        \"text\": \"Yes. Microsoft 365 E5 includes access to Agent Builder and APIs, allowing organisations to create custom Security Copilot agents and integrations.\"\n      }\n    }\n  ]\n}\n<\/script><\/p>\n<h2><strong>What Changed with Microsoft 365 E5<\/strong><\/h2>\n<p>Previously, Microsoft Security Copilot was a separate premium add-on, often purchased with unpredictable compute unit costs. Under the new model:<\/p>\n<ul>\n<li><strong>Security Copilot is now included with Microsoft 365 E5<\/strong>: It means all E5 customers automatically gain access with no additional licensing fees.<\/li>\n<li>Microsoft will give customers 30 days\u2019 advance notice before activation in their tenant.<\/li>\n<li>Organisations receive a monthly allocation of Security Compute Units (SCUs) that scale with the number of E5 users.<\/li>\n<\/ul>\n<p>The monthly SCU allocation provides the capacity to run Security Copilot workflows, experiment with its features, and integrate AI into security operations without unpredictable spending.<\/p>\n<p>This update applies only to Microsoft 365 E5 licences; it does not automatically include other licence types such as Microsoft 365 E3.<\/p>\n<div class=\"latest-blog\"><div class=\"latestblognpost\"><em><b>Read More: <\/b><\/em><a href=\"https:\/\/exigotech.co\/in\/blog\/backup-and-disaster-recovery-bdr-strategy\">Backup and Disaster Recovery: Why Backups Alone Are Not Enough to Keep Your Business Running<\/a><\/div><\/div>\n<h3><strong>How the New Model Works<\/strong><\/h3>\n<h4><strong>Included AI capacity (Security Compute Units):<\/strong><\/h4>\n<ul>\n<li>E5 customers receive 400 SCUs per month for every 1,000 E5 users, proportionally scaling with licence count.<\/li>\n<li>At scale, larger tenants can receive up to 10,000 SCUs per month, included as part of their subscription.<\/li>\n<\/ul>\n<p>SCUs represent the compute units used by Security Copilot\u2019s AI processes, essentially powering AI workloads like alert summarisation, pattern analysis, and guided investigation.<\/p>\n<h4><strong>Integration with existing security tools:<\/strong><\/h4>\n<p>Security Copilot works inside the security products E5 customers already use, including:<\/p>\n<ul>\n<li>Microsoft Defender<\/li>\n<li>Microsoft Entra<\/li>\n<li>Microsoft Intune<\/li>\n<li>Microsoft Purview<\/li>\n<li>The standalone Security Copilot portal<\/li>\n<\/ul>\n<p>This means analysts and administrators can access AI-driven insights inside familiar tools, helping speed up workflows without requiring users to adopt completely new platforms.<\/p>\n<h4><strong>Agent Builder and API access:<\/strong><\/h4>\n<p>E5 customers also gain access to Agent Builder and APIs, enabling the development of custom Copilot agents and integrations across their Microsoft ecosystem.<\/p>\n<div class=\"latest-blog\"><div class=\"latestblognpost\"><em><b>Read More: <\/b><\/em><a href=\"https:\/\/exigotech.co\/in\/blog\/sophos-firewall-v22-features-and-upgrade-guide\">Sophos Firewall v22 Now Available: Stronger Security, Smarter Upgrades for Modern Businesses<\/a><\/div><\/div>\n<h3><strong>Why This Matters for IT and Security Leaders<\/strong><\/h3>\n<p><img decoding=\"async\" class=\"aligncenter size-full wp-image-93241\" src=\"https:\/\/exigotech.co\/wp-content\/uploads\/2026\/01\/why-it-matters-microsoft-365-e5-blog-012026.webp\" alt=\"Why This Matters for IT and Security Leaders\" width=\"1025\" height=\"514\" srcset=\"https:\/\/exigotech.co\/wp-content\/uploads\/2026\/01\/why-it-matters-microsoft-365-e5-blog-012026.webp 1025w, https:\/\/exigotech.co\/wp-content\/uploads\/2026\/01\/why-it-matters-microsoft-365-e5-blog-012026-980x491.webp 980w, https:\/\/exigotech.co\/wp-content\/uploads\/2026\/01\/why-it-matters-microsoft-365-e5-blog-012026-480x241.webp 480w\" sizes=\"(min-width: 0px) and (max-width: 480px) 480px, (min-width: 481px) and (max-width: 980px) 980px, (min-width: 981px) 1025px, 100vw\" \/><\/p>\n<p>The inclusion of Microsoft Security Copilot with Microsoft 365 E5 is more than a licensing change; it\u2019s a strategic shift that makes AI-assisted security practical and predictable for enterprise customers.<\/p>\n<h4><strong>1. Predictable Cost and Licensing<\/strong><\/h4>\n<p>Security Copilot is now part of the E5 licence, eliminating surprise charges or unpredictable pricing tied to external Copilot compute purchases. The monthly SCU pool gives a known, budgetable amount of AI capacity that organisations can plan around.<\/p>\n<h4><strong>2. Easier Experimentation<\/strong><\/h4>\n<p>Without the need to procure separate licences or compute units, teams can start experimenting with Security Copilot quickly. Organisations can run real-world use cases, such as alert triage or incident investigation, using the capacity they already own.<\/p>\n<h4><strong>3. Seamless Security Tool Integration<\/strong><\/h4>\n<p>Because Security Copilot works within Defender, Entra, Intune, and Purview, security professionals don\u2019t need to context-switch between disparate tools. AI insights are delivered where analysts already operate.<\/p>\n<h4><strong>4. Strengthened ROI on Microsoft 365 E5<\/strong><\/h4>\n<p>Microsoft 365 E5 already includes a broad set of advanced security, compliance, and analytics tools. Adding Security Copilot strengthens that investment, bringing AI directly into the heart of these capabilities.<\/p>\n<p><a href=\"\/in\/contact\"><img decoding=\"async\" class=\"aligncenter size-full wp-image-93253\" src=\"https:\/\/exigotech.co\/wp-content\/uploads\/2026\/01\/cta-microsoft-365-e5-blog-012026-01.webp\" alt=\"CTA - Book a Security Enablement Session\" width=\"891\" height=\"212\" srcset=\"https:\/\/exigotech.co\/wp-content\/uploads\/2026\/01\/cta-microsoft-365-e5-blog-012026-01.webp 891w, https:\/\/exigotech.co\/wp-content\/uploads\/2026\/01\/cta-microsoft-365-e5-blog-012026-01-480x114.webp 480w\" sizes=\"(min-width: 0px) and (max-width: 480px) 480px, (min-width: 481px) 891px, 100vw\" \/><\/a><\/p>\n<h3><strong>What\u2019s Included in the Microsoft 365 E5 Entitlement<\/strong><\/h3>\n<p>The E5 licence includes the following components related to Security Copilot:<\/p>\n<h4><strong>Included with no extra cost at baseline:<\/strong><\/h4>\n<ul>\n<li>Monthly SCU pool based on user count.<\/li>\n<li>Core agent experiences integrated into Defender, Entra, Intune, and Purview.<\/li>\n<li>Access to the Security Copilot portal.<\/li>\n<li>Agent Builder and APIs for creating custom AI extensions and workflows.<\/li>\n<\/ul>\n<h4><strong>Not included by default:<\/strong><\/h4>\n<ul>\n<li>SCU capacity beyond the monthly included pool.<\/li>\n<li>Azure Logic Apps usage.<\/li>\n<li>Microsoft Sentinel data lake compute or storage.<\/li>\n<li>Third-party partner licences or fees.<\/li>\n<li>Some non-agent Purview experiences.<\/li>\n<\/ul>\n<p>Customers who need more capacity later can expect options to purchase additional SCUs on a pay-as-you-go basis, although Microsoft will provide advance notice before that option is enabled.<\/p>\n<div class=\"latest-blog\"><div class=\"latestblognpost\"><em><b>Read More: <\/b><\/em><a href=\"https:\/\/exigotech.co\/in\/blog\/user-application-hardening-essential-eight\">User Application Hardening: Reducing the Everyday Tools Attackers Exploit<\/a><\/div><\/div>\n<h3><strong>How Exigo Tech Helps You Maximise Microsoft Security Copilot<\/strong><\/h3>\n<p>Owning Microsoft 365 E5 and having access to Security Copilot is only the first step. Real impact comes from effective enablement and integration.<\/p>\n<p>At Exigo Tech, we help organisations:<\/p>\n<ul>\n<li>Understand what Security Copilot provides under Microsoft 365 E5.<\/li>\n<li>Define high-impact use cases aligned to security priorities.<\/li>\n<li>Integrate AI insights into daily workflows.<\/li>\n<li>Measure value, such as improved response times or alert reduction.<\/li>\n<li>Optimise Security Compute Unit usage over time.<\/li>\n<\/ul>\n<p>We don\u2019t just help you adopt Security Copilot; we help you use it in ways that deliver measurable security outcomes.<\/p>\n<p><a href=\"\/in\/contact\"><img decoding=\"async\" class=\"aligncenter size-full wp-image-93249\" src=\"https:\/\/exigotech.co\/wp-content\/uploads\/2026\/01\/cta-microsoft-365-e5-blog-012026-02.webp\" alt=\"CTA - Explore Microsoft Security Copilot in Microsoft 365 E5\" width=\"891\" height=\"211\" srcset=\"https:\/\/exigotech.co\/wp-content\/uploads\/2026\/01\/cta-microsoft-365-e5-blog-012026-02.webp 891w, https:\/\/exigotech.co\/wp-content\/uploads\/2026\/01\/cta-microsoft-365-e5-blog-012026-02-480x114.webp 480w\" sizes=\"(min-width: 0px) and (max-width: 480px) 480px, (min-width: 481px) 891px, 100vw\" \/><\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>In a major shift for enterprise security, Microsoft has announced that Microsoft Security Copilot, its AI-powered security assistant, is now&#8230;<\/p>\n","protected":false},"author":8,"featured_media":93257,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_et_pb_use_builder":"","_et_pb_old_content":"","_et_gb_content_width":"","inline_featured_image":false,"footnotes":""},"categories":[16],"tags":[56],"class_list":["post-93240","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-security","tag-microsoft-365-e5"],"acf":[],"_links":{"self":[{"href":"https:\/\/exigotech.co\/in\/wp-json\/wp\/v2\/posts\/93240","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/exigotech.co\/in\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/exigotech.co\/in\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/exigotech.co\/in\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/exigotech.co\/in\/wp-json\/wp\/v2\/comments?post=93240"}],"version-history":[{"count":3,"href":"https:\/\/exigotech.co\/in\/wp-json\/wp\/v2\/posts\/93240\/revisions"}],"predecessor-version":[{"id":93263,"href":"https:\/\/exigotech.co\/in\/wp-json\/wp\/v2\/posts\/93240\/revisions\/93263"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/exigotech.co\/in\/wp-json\/wp\/v2\/media\/93257"}],"wp:attachment":[{"href":"https:\/\/exigotech.co\/in\/wp-json\/wp\/v2\/media?parent=93240"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/exigotech.co\/in\/wp-json\/wp\/v2\/categories?post=93240"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/exigotech.co\/in\/wp-json\/wp\/v2\/tags?post=93240"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}