SIEM copilot profile
Microsoft Security Copilot profile: a generative AI assistant priced in security compute units
The short answer
By The Triage Desk · AI Cyber Compare · Published 2026-10-08
Desk research from public vendor pages: vendor facts read September 2026, updated 2026-10-13. Editorial reading of what vendors publish; we did not run the products and did not interview vendors.
Which operating model is Security Copilot?
Model: SIEM copilot.
Who carries each stage in Security Copilot?
- Your analysts
- Rules you write
- AI agent
- Provider's analysts
- Shared
- Not described
- Investigate: An assistant analysts use inside Microsoft Security products.
Source: Microsoft Security Copilot pricing · Read 11 Oct 2026
What are Security Copilot's strengths?
Strengths
- The only product on this site with published rates, per security compute unit hour.
- Embedded in Microsoft Security products, with agents included in Microsoft 365 E5.
What are Security Copilot's limits?
Limits
- Cost depends on SCU hours used; the price table did not render on our read, so rates come from Microsoft's FAQ billing example.
- The agents described cover Microsoft's own products (Defender, Entra, Intune, Purview).
What does Security Copilot say about its own results?
No vendor figures were collected for this profile.
Key facts
| Fact | Detail |
|---|---|
| What it is | Generative AI assistant, "available as a standalone experience or embedded in Microsoft Security products". Source: Microsoft Security Copilot pricing · Read 11 Oct 2026 |
| Pricing unit | Security compute units: provisioned (minimum 1) plus overage, billed per hour. Source: Microsoft Security Copilot pricing · Read 11 Oct 2026 |
| Billing example | "4 SCUs (at $4 per provisioned SCU) plus 3.2 SCUs (at $6 per overage SCU)" for one hour. Source: Microsoft Security Copilot pricing · Read 11 Oct 2026 |
| Agents | Security Copilot agents across Defender, Entra, Intune and Purview at no added cost with Microsoft 365 E5. Source: Microsoft Security Copilot pricing · Read 11 Oct 2026 |
Asked often about this page
What does Microsoft Security Copilot cost?
Priced in security compute units (SCUs): provisioned SCUs for routine workloads (a minimum of 1 provisioned SCU is required) plus pay-as-you-go overage SCUs up to a limit you choose. Microsoft's FAQ billing example uses $4 per provisioned SCU and $6 per overage SCU per hour; Microsoft labels its prices estimates in USD. Security Copilot agents across Defender, Entra, Intune and Purview come at no added cost with Microsoft 365 E5.
Which model is Microsoft Security Copilot?
SIEM copilot.
Sources for this profile
Source: Microsoft Security Copilot pricing · Read 11 Oct 2026
Lighter profile: facts read 11 October 2026. Not part of the fact table, fit finder vendor list or pair pages, which compare the thirteen AI SOC and SOAR products on 11 capabilities.