Security Copilot Joins the Party: What This Means for Microsoft 365 Enterprise Plans

November 24, 2025

Microsoft has just announced at Ignite 2025: Security Copilot is now included in Microsoft 365’s Enterprise E5 plan at no extra cost. Previously, this AI-powered security assistant was a standalone service with a hefty price tag, making it out of reach for many organisations. This move changes the game for IT and security teams and creates a compelling reason for businesses on standard plans to consider upgrading.


What’s New?

Security Copilot isn’t just an add-on anymore. It’s now built directly into the tools security and IT teams use every day, including:


  • Microsoft Defender: for threat detection, phishing triage, and incident response
  • Microsoft Entra: for identity and access management, Conditional Access optimisation
  • Microsoft Intune: for policy configuration, vulnerability remediation, and device lifecycle management
  • Microsoft Purview: for data security and compliance posture management


This integration means security teams can work smarter, faster, and more proactively, without juggling multiple dashboards.


Why It Matters

Cyberattacks are accelerating, and the global shortage of cybersecurity professionals isn’t going away. Security Copilot acts as an AI-powered force multiplier, helping teams:


  • Accelerate investigations and reduce Mean Time to Detect (MTTD) and Respond (MTTR)
  • Automate repetitive tasks like alert triage and policy reviews
  • Proactively remediate risks with adaptive, autonomous agents
  • Leverage Microsoft’s threat intelligence and your organisation’s data for tailored insights


What’s Included in the E5 Plan?

Microsoft 365 Enterprise E5 customers now get Security Copilot at no additional cost, including:


  • 400 Security Compute Units (SCUs) per month per 1,000 users (up to 10,000 SCUs/month)
  • Access to 12 new Microsoft-built agents across Defender, Entra, Intune, and Purview
  • Ability to create custom agents and integrate third-party solutions via APIs
  • A growing ecosystem of partner-built agents available in the Microsoft Security Store


This capacity is designed to cover typical enterprise scenarios without extra spend.


Rollout Timeline

  • Starts now for existing Security Copilot customers with E5
  • Phased rollout for all E5 customers over the coming months
  • 30-day notice before activation, so organisations can prepare


What About E3 Customers?

If you’re on Microsoft 365 Enterprise E3 (the standard plan), this is a strong reason to upgrade. E5 now delivers:


  • Advanced security and compliance capabilities
  • Built-in AI agents to reduce manual workload
  • A future-proof foundation for AI-driven security


The cost of a breach far outweighs the cost of upgrading. With Security Copilot included, E5 offers unmatched value for organisations serious about security.


How Indiko DATA Can Help

At Indiko Data, we specialise in helping businesses maximise their Microsoft investments. We can:


  • Assess your current security posture
  • Plan your E3-to-E5 migration
  • Help you create a Flightplan for your Copilot journey, ensuring Security Copilot is fully integrated as part of your E5 subscription


Ready to take advantage of Security Copilot in E5? Contact Indiko Data  today to explore your upgrade options and unlock AI-powered security.

Person working at a desk with dual monitors in a dimly lit room, lit by blue screen glow.
July 2, 2026
Discover the hidden security stack inside Microsoft 365 Business Premium and how Indiko Data helps SMBs maximise protection without adding more tools.
Glass-fronted office building with crisscross steel beams and people visible on multiple floors
June 18, 2026
Many SMBs are overpaying for tools already included in Microsoft Business Premium. Discover how Indiko Data helps you get full value from your setup.
Empty modern office with desks, chairs, laptops, papers, and sunlight from a large window.
June 18, 2026
Discover 5 common misconceptions about Microsoft Defender and how Indiko Data helps SMBs unlock its full potential for modern, connected security.
Hands typing on a laptop at a wooden desk with a coffee mug and notebook nearby.
June 9, 2026
Modern risk extends beyond endpoints. See how Microsoft Defender and Indiko Data provide visibility across SaaS, shadow IT, and AI usage.
Laptop screen displaying red “CYBER SECURITY” text on a dark background
June 4, 2026
Detection alone doesn’t stop threats. Learn how Microsoft Defender and Indiko Data help organisations respond faster with MDR and connected security.
Blue-lit server racks in a data center with a cooling unit in the foreground
June 1, 2026
Cloud risk often starts with misconfiguration. Discover how Microsoft Defender and Indiko Data help reduce exposure and strengthen cloud security posture.
Blue server rack with glowing green indicator lights and perforated metal panels
May 28, 2026
Microsoft Defender, Sentinel, and MDR transform security operations. See how Indiko Data helps turn disconnected tools into effective protection.
Robot hand touching glowing digital network lines on a blue background
May 19, 2026
Learn how Microsoft Defender XDR helps organisations move beyond siloed tools. Discover how Indiko Data enables full attack visibility and faster response.
Four coworkers gather around a laptop at a bright office desk, reviewing documents and smiling.
May 8, 2026
Explore how Azure Virtual Desktop delivers resilient, scalable desktop access with global performance, built‑in availability and business continuity, managed by Indiko Data.
Minimal desk setup with a monitor, keyboard, mouse, phone, plant, and small figurines
April 27, 2026
Learn how Azure Virtual Desktop simplifies desktop and application management with easier app delivery and consistent security, managed by Indiko Data.