Discover what’s new in Microsoft Security for partners this November. From Microsoft Ignite 2026 and new Microsoft Defender capabilities to an updated Frontier Accelerate for Security module, delegated access for Microsoft Sentinel and Defender XDR, and guidance for securing.
Navigate to
News and Announcements, Incentives and Offers, Skilling and Events, Go-To-Market, Customer Success
- Get ready for Microsoft Ignite 2026: Microsoft Ignite 2026, November 17–20, is coming up. Join in person or digitally to build connections, accelerate customer conversations, and get early product access to shape your 2027 plans. Attending in person? Register now to access exclusive partner programming, including the Microsoft AI Cloud Partner Program booth, exclusive networking areas, and dedicated partner sessions. Joining online? Access livestreamed and on-demand keynote and breakout sessions, planning tools, and online-exclusive experiences. Check out the session catalog to start planning your Microsoft Ignite experience.
- Bring Microsoft Agent 365 into your Security workshops: Turn customer questions about agent security and governance into an opportunity to guide secure agent adoption. The Frontier Accelerate for Security Envisioning & POC engagement now includes an updated trial-led Microsoft Agent 365 module that eligible partners can use in technical envisioning workshops. Use the partner delivery guide, presentation decks, and FAQ to show customers how to observe, govern, and secure agents, then identify clear next steps for their environment. Download the updated kit to put the module to work in your qualified customer engagements.
- Manage customer security across tenants with delegated access: Granular delegated admin privileges (GDAP) for Microsoft Sentinel and Microsoft Defender XDR are now generally available in the Microsoft Defender portal, including custom roles in unified role-based access control (RBAC). You sign in from your own tenant and access customer environments through your own security groups, with no guest or admin accounts needed in customer tenants. Because customers approve the roles you request, it’s easier to earn their trust for partner-managed security while you run security operations across more tenants from one portal.
- Get familiar with Defender Workload Units in Microsoft Defender for Cloud: Microsoft Defender for Cloud is introducing Defender Workload Units (DWU), a billing model that maps protected workloads across servers, storage, databases, containers, APIs, and other resources to a unified pricing construct. Underlying workload measurements stay the same, while customers gain a simpler pricing and cost-management experience with a consistent global per-unit price. Get familiar with the DWU experience so you can help customers estimate costs, plan their migration, and track usage in the Defender portal.
- Plan your customers’ transition from OT security in Microsoft Defender for IoT: Microsoft is deprecating the operational technology (OT) security capability in Microsoft Defender for IoT, with end of support on May 31, 2028. There is no first-party replacement, so customers who need continued OT coverage should transition to a validated partner integration available for Defender customers. Enterprise IoT in Microsoft Defender for Endpoint is not affected. Identify your affected OT customers now and begin planning their transition ahead of end of support.
- Join the conversation with Microsoft Security partners: The Microsoft Security Partner Community on LinkedIn is a dedicated space to connect with peers, learn from experts, share best practices, and stay ahead of the latest Microsoft Security and AI updates. Partners and experts can come together to connect, collaborate, and stay informed on Microsoft Security offerings, events, and opportunities.
- Never miss another program update: Stay aligned, maximize your benefits, and uncover new ways to scale your impact and revenue by getting the latest news and updates on the Microsoft AI Cloud Partner Program delivered right to your inbox each month.
- Follow the latest Security partner news hub: Catch up on important announcements from previous Security newsletters at the Microsoft Community Hub. Read the October newsletter to learn about product updates and other opportunities you may have missed.
- Stay in the loop on Microsoft Security updates: In the Loop is the Microsoft Security news series delivering timely updates on what's new across the portfolio and what it means for your security strategy. The October edition explores securing agents, expanding least privilege, and simplifying security operations, offering practical guidance to stay informed and connect new capabilities to customers’ security priorities.
- New 7.5% CSP partner promotion for Business Premium security suites: Eligible Cloud Solution Provider (CSP) partners can now access a 7.5% promotion for Microsoft Defender Suite for Business Premium and Microsoft Purview Suite for Business Premium for qualifying customers with fewer than 300 seats. The promotion supports the transition from CSP Security Accelerate and gives eligible partners greater flexibility to support profitability and grow their small and medium-sized business (SMB) security business. Review the promotion guide for eligibility and terms, identify qualifying opportunities, and prepare your sales and quoting teams to apply the promotion.
- Extended offer: 50% off Microsoft Purview Suite for Business Premium: Customers who have licensed Microsoft 365 Business Premium together with Microsoft 365 Copilot Business or Microsoft 365 Copilot qualify for 50% off enhanced data protection with Microsoft Purview Suite for Business Premium. Position Purview in customer conversations as a safeguard designed to make Copilot deployments defensible and compliant. Lead data protection and compliance conversations with this limited-time offer, now extended through December 31, 2026.
- Build your security expertise and grow customer opportunities with the Skilling Hub: Explore security-focused learning across endpoint protection, identity management, cloud application security, data classification, and event and incident management through in-person events, live virtual sessions, self-paced training, microskilling, and guided learning journeys. Visit the Security Skilling Hub to deepen your knowledge, strengthen customer security outcomes, and expand your services portfolio.
- Turn co-sell into a scalable growth engine: Co-sell can drive stronger collaboration, faster deal progression, and better sales outcomes, but success requires more than occasional engagement. Learn how to build a repeatable co-sell motion that delivers long-term results in the new Co-sell Execution Engine video series on the Microsoft Partner Skilling Hub. In five on-demand sessions, Microsoft co-sell leaders and experienced partners share practical frameworks and proven strategies to improve collaboration with Microsoft, increase deal velocity, and win more opportunities.
- Make every Microsoft 365 Business Premium opportunity a security conversation: SMB customers want to put cloud and AI to work while protecting their people, data, and operations, so every Business Premium opportunity is a chance to lead with security. Read the latest blog for practical guidance on identifying opportunities, matching Microsoft Defender Suite and Microsoft Purview Suite for Business Premium to customer needs, and moving from deployment to recurring managed services. You’ll also find the resources, offers, and incentives to help you build a repeatable security practice.
- Catch up on the launch of ISOC in Microsoft Defender: On September 23, Microsoft announced Integrated Security Operations Center (ISOC) in Microsoft Defender, now in public preview. ISOC combines extended detection and response (XDR) and security information and event management (SIEM) in the Defender experience, laying the foundation for agentic security. As a feature benefit for eligible Microsoft 365 E5 and E7 customers, it adds security operations capabilities that previously required a separate Microsoft Sentinel purchase, plus increased Defender data retention and a new, lower price for ingesting non-Microsoft data. Use the launch to expand customer conversations from SIEM to full security operations transformation and open opportunities for assessment, deployment, migration, and managed services. View the launch keynote from the September 23 digital event and read the announcement for an overview of what launched.
- Help customers secure the agentic insider: Agents need access to company data, applications, and tools to be useful, and that access can introduce insider risk. Microsoft is extending Project Perception with a continuous security model built on four responsibilities (know, contain, protect, and adapt), supported by capabilities across Microsoft Agent 365, Entra Agent ID, Dynamic Conditional Access, and Guardian Agents. Lead customers from agent experimentation to governed deployment with advisory, implementation, and managed security services that address identity, access, data, runtime, and changing risk.
- Lead deeper security conversations with SMB customers: SMB customers can't scale AI they can't secure, and many have no IT team to lean on. "Run your business securely" is one of the five Frontier Transformation conversations for FY27. Lead with trust and resilience, then attach the services behind Microsoft 365 Business Premium, Defender, Entra, and Purview. Start with the SMB playbook.
- Lead digital sovereignty conversations that drive bigger deals: Digital sovereignty is emerging as a critical consideration for technology investments, creating an opportunity to move beyond implementation and lead larger, higher-value customer engagements. With Microsoft, you can address a broader range of customer needs through a differentiated portfolio spanning Sovereign Public Cloud, Sovereign Private Cloud, and the Sovereign Partner Ecosystem. Read our latest blog to discover how you can expand your advisory opportunity and earn a Digital Sovereignty specialization to demonstrate your expertise, differentiate your practice, and position your business to win more strategic engagements.
- Veeam and MTI turned security and data resilience into a foundation for cloud-first innovation: Veeam and MTI modernized protection across Sheffield Hallam University’s hybrid environment with centralized governance, immutable backups, and security capabilities that strengthen protection against cyberthreats, achieving a 99.9% data recovery success rate and up to 13.7x faster agent-based backups. Discover how a partner-led approach to security and data resilience can reduce risk while giving customers greater confidence to expand their Microsoft 365 and Azure environments.
- Share your partner and customer success stories: Showcase your impact, highlight your expertise, and demonstrate the measurable success you’re delivering to customers. Go to the Partner Success story submission form to get started.
Follow the tag Security partner news to stay updated on monthly Security partner news.
Updated Nov 11, 2026
Version 1.0
JillArmourMicrosoft
Community Manager
Community Manager