Microsoft cut AI agent security out of standard Defender licenses on 1 July.
The Story
Copilot Studio and Foundry agents now need a separate Agent 365 license or they run with zero threat protection.
Why It Matters
Many businesses assumed Defender for Cloud Apps or Defender for Cloud already covered any Copilot Studio or Foundry agent they had built or enabled. As of 1 July that stopped being true: threat detection and real-time blocking for those agents now require an Agent 365-eligible license (Microsoft 365 E5, Business Premium, or the standalone add-on). Tenants without one lost the protection with no separate warning beyond an admin banner.
What To Do About It
Ask your IT provider to confirm whether your tenant carries an Agent 365-eligible license and whether any Copilot Studio or Foundry agent you already use lost real-time blocking on 1 July. A 25-seat, 30-day admin-led trial is available if you need to check before committing to the 15 USD per user per month standalone license.
Sources
Related Signals
A WatchGuard survey of 684 SMB employees across the US, UK, Germany, France and Spain found 64% use unauthorized AI tools at work, and fewer than 3 in 10 employers can accurately track what software staff actually run.
30 Jul 2026
CoreView's July 2026 governance report finds two-thirds of organizations have delayed or cancelled Microsoft Copilot rollouts over fear it will surface overshared SharePoint files.
29 Jul 2026Um relatório da CoreView de julho de 2026 indica que dois terços das organizações adiaram ou cancelaram o Microsoft Copilot com receio de que exponha ficheiros partilhados em excesso no SharePoint.
29 Jul 2026