Solutions

Every challenge, mapped to a security domain of your AI estate — and the scenarios that solve it, end to end.

Discover & trust

What AI and agents are in use, and can you trust them?

Agent Observability & Governance

Bring the growing population of AI agents into view and under control with Microsoft Agent 365 — from a centralized, cross-platform inventory of every agent and who owns it, to lifecycle governance over which agents are allowed, what tools they can call, and which policies apply.

Included scenarios
  • Observe the Agent Estate
  • Govern Agent Lifecycle

Shadow AI

Discover, control, and govern unsanctioned AI app usage across your organisation — from building visibility into shadow AI activity to blocking risky destinations, preventing data loss, and governing sanctioned use.

Included scenarios
  • Discover Shadow AI Usage
  • Block Unsanctioned AI Destinations
  • Control AI Apps on Managed Devices

Agent Distribution and Supply Chain

Govern how agents — Microsoft-built, partner-built, and organization-built — become available to users, and judge how much to trust an agent your organization did not build.

Included scenarios
  • Govern Agent Distribution

Identity & access

What can each agent authenticate as and reach?

Agent Identity & Access Management

Give every agent a first-class identity, then govern what it authenticates as and what it can reach — registering agents in Microsoft Entra, assigning owners, right-sizing access with packages and reviews, and enforcing risk-based Conditional Access.

Included scenarios
  • Govern Agent Identity and Access

Enterprise data foundation

What enterprise data can AI read and share?

Secure SharePoint Grounding Data

Reduce oversharing and grounding-data exposure for agents that ground on SharePoint — govern what content agents can discover and access, and protect the sensitive data behind it.

Included scenarios
  • Govern SharePoint-Grounded Agents

Protect Enterprise Data Used by AI

Control what enterprise data AI can read and share — discover where sensitive data and oversharing create AI risk, classify and label it, prevent its loss to AI apps and agents, and govern its lifecycle.

Included scenarios
  • Discover Sensitive Data and AI Risk
  • Classify and Label Data Feeding AI
  • Prevent Data Loss to AI Apps and Agents
  • Govern AI Data Lifecycle and Retention

Prevent, detect & respond

Can you prevent, detect, and respond to attacks on AI and agents at runtime?

Secure the Agent Runtime

Protect the running agent from manipulation — control which destinations it can reach, block risky tool invocations before they execute, and inspect the local agent loop on endpoints.

Included scenarios
  • Protect Agents at Runtime

SecOps for AI

Connect agent activity to security operations — stream telemetry to the SOC, detect AI-specific threats, and investigate and respond to agent incidents across Microsoft Sentinel, Defender, and Purview.

Included scenarios
  • Stream Agent Activity to Security Operations
  • Detect Threats to AI Agents
  • Investigate and Respond to Agent Incidents

Detect & Respond to AI Data Risk

Turn AI audit signals, insider-risk indicators, and communication-compliance findings into investigation and response — bridged into Microsoft Defender XDR and Microsoft Sentinel.

Included scenarios
  • Detect and Respond to Risky AI Data Activity

Build surfaces

Are agents being built safely?

Secure Agents Built in Microsoft Copilot Studio

Secure how agents are built on the low-code stack — Copilot Studio and the Power Platform admin center — before they become enterprise assets.

Included scenarios
  • Harden Copilot Studio Agents
  • Govern Power Platform Environments
  • Promote Copilot Studio Agents to Production

Secure Agents Built in Azure AI Foundry

Secure the pro-code build plane end to end — found the platform, govern the model supply chain, and protect the runtime — for agents built and deployed in Microsoft Foundry.

Included scenarios
  • Establish the Foundry Security Foundation
  • Govern the Foundry Model Supply Chain
  • Protect Foundry Agents at Runtime