MC1180712 – M365 Change Digest

One-line summary

Copilot Studio agents gain enhanced security with external threat detection, available December 10, 2025; admins can integrate Microsoft Defender or other providers via Entra and Power Platform.

Similar updates

Details

Body (from Message Center)

Update: Release of this feature has been updated.

We are announcing the ability to strengthen security of Copilot Studio agents with additional threat protection in Microsoft Copilot Studio. This feature will reach general availability on December 10, 2025.

How does this affect me?
This feature allows you to configure external threat detection systems for enhanced oversight. These tools operate during the agent's run-time, continuously evaluating agent activity. If the system detects any tools or actions it deems suspicious, it can intervene to approve or block their execution, providing an extra layer of real-time protection and compliance enforcement.

With the flexibility provided by this feature, users can select Microsoft Defender, integrate with other trusted security partners, or develop and connect your own custom monitoring solutions. Admins can enable this feature using the following steps:

Register a Microsoft Entra application: A Power Platform Administrator creates an Entra app to securely authenticate between Copilot Studio and the chosen external monitoring provider. This can be done using a provided PowerShell script or manually through the Azure portal.
Configure integration in Power Platform Admin Center: The administrator enters the Entra app details and the REST API endpoint from the security partner in the Admin Center’s threat detection settings.

Once enabled, Copilot Studio shares only the necessary runtime data with the external provider for real-time decision-making. The integration can be disabled at any time if requirements change. External threat detection is available only for generative agents using generative orchestration (not classic agents).

Organizations are responsible for ensuring their chosen provider’s data handling and compliance standards meet internal and regulatory requirements.

What action do I need to take?
This message is for awareness, and no action is required.

If you would like more information on this feature, please visit the Enable external threat detection and protection for Copilot Studio custom agents (preview).

Raw JSON (for debugging)

Expand/collapse the full payload below.

Show/hide raw

{
  "snapshot_item": {
    "action_required_by": null,
    "ai_action_required_by": null,
    "ai_actions": [
      "Review integration options for external threat detection",
      "Register Entra app for authentication",
      "Configure integration in Power Platform Admin Center"
    ],
    "ai_master_tags": [
      "Security"
    ],
    "ai_model": "gpt-4.1",
    "ai_summary": "Copilot Studio agents gain enhanced security with external threat detection, available December 10, 2025; admins can integrate Microsoft Defender or other providers via Entra and Power Platform.",
    "ai_topics": [
      "Power Platform",
      "Copilot",
      "Entra",
      "Defender"
    ],
    "category": "stayInformed",
    "details_map": {},
    "id": "MC1180712",
    "importance": 1,
    "is_major_change": false,
    "last_modified": "2025-11-03T15:01:32Z",
    "ms_products": [
      "Power Platform"
    ],
    "platforms": null,
    "roadmap_ids": [],
    "services": [
      "Power Platform"
    ],
    "severity": "normal",
    "tags": [
      "New feature"
    ],
    "title": "Microsoft Copilot Studio - Strengthen security of Copilot Studio agents with additional threat protection"
  }
}