Microsoft Security Copilot has been in use for almost a year, integrated with the complete stack that includes M365 and agentic AI plus security. As Microsoft CSP partners, we deploy Microsoft Security Copilot for customers, allowing them to integrate their data with Microsoft Sentinel and other technologies to discover any issues that have occurred in the organization. Customers can write a prompt and receive all incidents that have happened in the organization, consolidated by the AI engine to help discover findings in approximately ten minutes instead of five hours.Every engagement with customers starts with a conversation about secure score, where we assist in assessing anything related to identity or data. If there is a lack on the data side, we help them with Microsoft Purview, and for identity issues, we have Defender for Identity, enabling the necessary tools. When discussing Purview, it now has all the AI infusion that enhances its collaboration with the overall suite, effectively benefiting the customer. The Security Copilot standalone portal is not used on a day-to-day basis by me, as the team manages it, but it is understood to be working well. I am more hands-on with M365 and Copilot Studio at a day-to-day productivity level, while the team is actively enabling Microsoft Security Copilot for customers. The options for scalability with Microsoft Security Copilot are endless, and the goal is to encourage all employees to use this engine. By employing agents with agentic AI, tasks that typically take hours are reduced to minutes.
I am not part of the admin team, but we take the feedback from our admins, who are essentially the people using Microsoft Security Copilot. From them, what I understand is that they want to use Microsoft Security Copilot to ensure there is comprehensive coverage, so Microsoft Security Copilot will help them assess Purview, Defender, Sentinel, all of them in one go. That is one of their key use cases for using Microsoft Security Copilot, to have everything under one umbrella. We are an all Microsoft shop, which means that we are using Microsoft's security tools and features. Microsoft Security Copilot is embedded across all the security tools that we use, and that is one benefit that we have been having. We do not have to purchase multiple tools or non-Microsoft tools, and we do not have to go for a Gemini or any other AI assistant tool. That is the use case primarily. I would say the integration of Microsoft Security Copilot with other Microsoft security solutions like Purview data security and posture management has helped ease a lot of pressure that earlier existed on admins and the CIO, whose main job was to have multiple integrations across different tools. Microsoft Security Copilot has helped with easing that pressure because everything is under a single umbrella, and they are able to devote their time towards the right set of activities. The time-saving has really helped is what I understand from them.
Microsoft Security Copilot capabilities are being attached to managed services. In every single one of the services including Microsoft Purview, Microsoft Sentinel, and in the XDR stack with E5 entitlements, Microsoft Security Copilot is being attached to each one of these managed offerings to add reduced time to detect, respond, and derive additional insight that most companies cannot purchase a full-time employee for. A full-time employee is usually too expensive, and Microsoft Security Copilot, especially with recent changes, allows for it to be a more beneficial route for some companies, specifically government.
As a solution provider and support service consultant, our goal is to develop a knowledge-based system integrated with AI. The concept involves offering an AI-powered chatbot platform for both customers and support teams. When a customer reports a system issue, the chatbot will search the knowledge base and deliver step-by-step guidance to help resolve the problem efficiently. Ideally, the implementation involves developing the chatbot and integrating its features through APIs. The database is hosted in the Microsoft Azure environment, where we configure the necessary parameters and establish connections with Microsoft Copilot’s API services. Once set up, the chatbot is trained to accurately retrieve and deliver relevant information from the knowledge base.
Security engineer at a university with 10,001+ employees
Real User
Top 10
Apr 29, 2025
My use cases involve writing rough emails and general documents using Microsoft Security Copilot. Microsoft Security Copilot benefits my company by making my work easier. I used to write documentation, and it made my work much easier while watching TV. I don't enjoy writing documents, and given that Microsoft Security Copilot can write documents in a matter of seconds, that helped me significantly. I would say about 10% to 15% time was saved.
My main use cases for Microsoft Security Copilot include our SOC operations in our organization where we provide service to clients, and we're using it to plan our week in terms of the activities and the priorities for each one of our clients. We're using it sporadically or when we're investigating a particular incident. Unfortunately, we are turning it on and off because of price constraints.
My main use cases involve policies. If something happens, then I just ask Microsoft Security Copilot what to do if I want to block a particular IP address or create any sort of policies. I use Microsoft Security Copilot for that. For any complex solutions, I first ask Microsoft Security Copilot, and if it's not working, then I go to the experts.
We are using Microsoft Security Copilot to summarize the discussions we have during calls. We also use it to rephrase different emails, and for PowerPoint presentations to reorder slides and manage information. We are exploring ways to extend its capabilities.
Manager II, Advanced Analytics at a healthcare company with 1,001-5,000 employees
Real User
Top 10
Nov 21, 2024
We are a healthcare organization building a platform for everyone that's secure. Microsoft Copilot for Security helps us ensure personally identifiable information (PII) and personal health information (PHI) aren't exposed. We use it in patient care in all our hospitals, clinics, and pharmacies.
I use Microsoft Copilot for Security to understand and manage security warnings and scores. It helps me make sense of these scores and allows me to take action to improve them.
Senior Application Engineer at a computer software company with 1,001-5,000 employees
Real User
Top 20
Nov 20, 2024
I use Microsoft Copilot for tracking down security incidents and making the process less complex. It allows me to figure out where each incident originates and consolidates everything into one place when an incident occurs.
We use Microsoft Copilot for Security in the educational sector to secure students and teachers. We are running a pilot with 20 teachers and 100-150 students. The next step is to scale it up for the rest. We have the educational school agreement, and we utilize Microsoft Copilot for Security to protect sensitive information.
Microsoft Security Copilot offers innovative AI-driven security features tailored for efficient data management and protection, particularly in education and healthcare, ensuring streamlined operations and enhanced data security. Microsoft Security Copilot enhances organizational security through its advanced features, including data sensitivity labeling and AI-driven insights, crucial for educational and healthcare sectors. Its auditing capabilities allow for efficient monitoring, while...
Microsoft Security Copilot has been in use for almost a year, integrated with the complete stack that includes M365 and agentic AI plus security. As Microsoft CSP partners, we deploy Microsoft Security Copilot for customers, allowing them to integrate their data with Microsoft Sentinel and other technologies to discover any issues that have occurred in the organization. Customers can write a prompt and receive all incidents that have happened in the organization, consolidated by the AI engine to help discover findings in approximately ten minutes instead of five hours.Every engagement with customers starts with a conversation about secure score, where we assist in assessing anything related to identity or data. If there is a lack on the data side, we help them with Microsoft Purview, and for identity issues, we have Defender for Identity, enabling the necessary tools. When discussing Purview, it now has all the AI infusion that enhances its collaboration with the overall suite, effectively benefiting the customer. The Security Copilot standalone portal is not used on a day-to-day basis by me, as the team manages it, but it is understood to be working well. I am more hands-on with M365 and Copilot Studio at a day-to-day productivity level, while the team is actively enabling Microsoft Security Copilot for customers. The options for scalability with Microsoft Security Copilot are endless, and the goal is to encourage all employees to use this engine. By employing agents with agentic AI, tasks that typically take hours are reduced to minutes.
Microsoft Security Copilot is primarily used for Copilot purposes.
My main use case is to design our activations to sell the products.
I am not part of the admin team, but we take the feedback from our admins, who are essentially the people using Microsoft Security Copilot. From them, what I understand is that they want to use Microsoft Security Copilot to ensure there is comprehensive coverage, so Microsoft Security Copilot will help them assess Purview, Defender, Sentinel, all of them in one go. That is one of their key use cases for using Microsoft Security Copilot, to have everything under one umbrella. We are an all Microsoft shop, which means that we are using Microsoft's security tools and features. Microsoft Security Copilot is embedded across all the security tools that we use, and that is one benefit that we have been having. We do not have to purchase multiple tools or non-Microsoft tools, and we do not have to go for a Gemini or any other AI assistant tool. That is the use case primarily. I would say the integration of Microsoft Security Copilot with other Microsoft security solutions like Purview data security and posture management has helped ease a lot of pressure that earlier existed on admins and the CIO, whose main job was to have multiple integrations across different tools. Microsoft Security Copilot has helped with easing that pressure because everything is under a single umbrella, and they are able to devote their time towards the right set of activities. The time-saving has really helped is what I understand from them.
Microsoft Security Copilot capabilities are being attached to managed services. In every single one of the services including Microsoft Purview, Microsoft Sentinel, and in the XDR stack with E5 entitlements, Microsoft Security Copilot is being attached to each one of these managed offerings to add reduced time to detect, respond, and derive additional insight that most companies cannot purchase a full-time employee for. A full-time employee is usually too expensive, and Microsoft Security Copilot, especially with recent changes, allows for it to be a more beneficial route for some companies, specifically government.
As a solution provider and support service consultant, our goal is to develop a knowledge-based system integrated with AI. The concept involves offering an AI-powered chatbot platform for both customers and support teams. When a customer reports a system issue, the chatbot will search the knowledge base and deliver step-by-step guidance to help resolve the problem efficiently. Ideally, the implementation involves developing the chatbot and integrating its features through APIs. The database is hosted in the Microsoft Azure environment, where we configure the necessary parameters and establish connections with Microsoft Copilot’s API services. Once set up, the chatbot is trained to accurately retrieve and deliver relevant information from the knowledge base.
My use cases involve writing rough emails and general documents using Microsoft Security Copilot. Microsoft Security Copilot benefits my company by making my work easier. I used to write documentation, and it made my work much easier while watching TV. I don't enjoy writing documents, and given that Microsoft Security Copilot can write documents in a matter of seconds, that helped me significantly. I would say about 10% to 15% time was saved.
My main use cases for Microsoft Security Copilot include our SOC operations in our organization where we provide service to clients, and we're using it to plan our week in terms of the activities and the priorities for each one of our clients. We're using it sporadically or when we're investigating a particular incident. Unfortunately, we are turning it on and off because of price constraints.
My main use cases involve policies. If something happens, then I just ask Microsoft Security Copilot what to do if I want to block a particular IP address or create any sort of policies. I use Microsoft Security Copilot for that. For any complex solutions, I first ask Microsoft Security Copilot, and if it's not working, then I go to the experts.
We are using Microsoft Security Copilot to summarize the discussions we have during calls. We also use it to rephrase different emails, and for PowerPoint presentations to reorder slides and manage information. We are exploring ways to extend its capabilities.
I am using Microsoft Security Copilot primarily for generative AI security.
We are a healthcare organization building a platform for everyone that's secure. Microsoft Copilot for Security helps us ensure personally identifiable information (PII) and personal health information (PHI) aren't exposed. We use it in patient care in all our hospitals, clinics, and pharmacies.
I use Microsoft Copilot for Security to understand and manage security warnings and scores. It helps me make sense of these scores and allows me to take action to improve them.
I use Microsoft Copilot for tracking down security incidents and making the process less complex. It allows me to figure out where each incident originates and consolidates everything into one place when an incident occurs.
We use Microsoft Copilot for Security in the educational sector to secure students and teachers. We are running a pilot with 20 teachers and 100-150 students. The next step is to scale it up for the rest. We have the educational school agreement, and we utilize Microsoft Copilot for Security to protect sensitive information.