We are announcing the ability to strengthen security of Copilot Studio agents with additional threat protection in Microsoft Copilot Studio. This feature will reach general availability on November 28, 2025.
How does this affect me?
This feature allows you to configure external threat detection systems for enhanced oversight. These tools operate during the agent’s run-time, continuously evaluating agent activity. If the system detects any tools or actions it deems suspicious, it can intervene to approve or block their execution, providing an extra layer of real-time protection and compliance enforcement.
With the flexibility provided by this feature, users can select Microsoft Defender, integrate with other trusted security partners, or develop and connect your own custom monitoring solutions. Admins can enable this feature using the following steps:
- Register a Microsoft Entra application: A Power Platform Administrator creates an Entra app to securely authenticate between Copilot Studio and the chosen external monitoring provider. This can be done using a provided PowerShell script or manually through the Azure portal.
- Configure integration in Power Platform Admin Center: The administrator enters the Entra app details and the REST API endpoint from the security partner in the Admin Center’s threat detection settings.
Organizations are responsible for ensuring their chosen provider’s data handling and compliance standards meet internal and regulatory requirements.
What action do I need to take?
This message is for awareness, and no action is required.
If you would like more information on this feature, please visit the Enable external threat detection and protection for Copilot Studio custom agents (preview).
Source: Microsoft
