Blog Post

Microsoft Security Copilot Blog
3 MIN READ

Microsoft Copilot for Security is now generally available

chaitra_satish's avatar
Apr 01, 2024

Microsoft Copilot for Security is the first generative AI security product that empowers security and IT teams to protect at the speed and scale of AI. As announced at Microsoft Secure last month, Copilot for Security is now available for purchase as of April 1, 2024. Customers can get started by provisioning capacity to run all Copilot workloads, both for standalone and for those embedded in our security products beginning with Microsoft Defender XDR.

 

With a flexible, consumption-based pricing model, customers can start small, experiment, and learn from their own usage to grow to the capacity required to meet their business needs and budget. Copilot capacity is measured in Security Compute Units (SCU). The in-product dashboard offers insights into SCU usage patterns allowing customers to monitor and flexibly provision the desired number of SCUs at any time. Microsoft recommends provisioning a minimum of 3 SCUs per hour to start.

 

Getting started

To start using Copilot for Security, customers will need an Azure subscription or can sign up for one if they are not already an Azure customer. SCUs can be purchased in the Copilot for Security portal or Azure portal.

 

Figure 1: Provision SUCs in the Copilot for Security Portal

 

Figure 2: Provision SUCs in the Azure Portal

 

Customers will need to go through the first run experience to add capacity to their workspace, select data sharing settings, and define role assignments. See documentation to learn more.

 

Usage monitoring

By leveraging the in-product dashboard, customers may easily view the number of SCUs available to their organization and monitor usage patterns, helping them determine if they must provision more capacity as their usage grows.  

 

Figure 3: Usage Monitoring in action

 

In-product alerts will remind customers to provision more SCUs as they are near their maximum capacity.

 

Copilot for Security pricing page and calculator

We have a new pricing page and calculator to provide more information on pricing and help customers estimate their monthly bill.

 

At the end of every billing cycle, the total charges for provisioned SCUs can be viewed in the Azure portal or on your monthly bill. If you would like to get started with Copilot for Security and have questions, please connect with your account representative today or complete the contact sales form.

 

Microsoft Defender Threat Intelligence (MDTI)

MDTI capabilities in Defender, including intel profiles, articles, and the analyst workbench, are included in Copilot for Security at no extra cost. To leverage MDTI's API endpoints to support automated enrichment against incidents or create sophisticated scripts not natively supported in Copilot today, customers will still need to purchase the MDTI API license.

 

FAQ

Q: What is a Security Compute Unit (SCU)?

A: A Security Compute Unit (SCU) is a unit measure of the compute power to run Copilot for Security workloads within both standalone and embedded experiences.

 

Q: How long does it take before SCUs are available after provisioning more?

A: SCUs are available within minutes of provisioning them.

 

Q: Are there any prerequisites to get started with Copilot for Security?

A: Customers need an Azure subscription or will need to sign up for one if they are not already an Azure customer.

 

Q: Are there any free trials for Copilot for Security available at GA?

A: No.

 

Learn more

Don't leave your business vulnerable to cyber threats. Empower your security and IT teams to protect organizations at the speed and scale of AI by signing up for Copilot for Security today. For more information see:

Updated Apr 01, 2024
Version 1.0
  • marvnl15's avatar
    marvnl15
    Copper Contributor

    It's a significant milestone, no doubt, but the cost upfront is just staggering. I'm hesitant to commit $3K without knowing if it's the right fit for our organization. Understanding the tool thoroughly is crucial at that price point. It's baffling they don't offer a trial period.

    The SCU calculation is quite complex initially. I mean, how do you accurately gauge our SCU needs? Peak hours demand more computing power, but investing during off-hours seems like an unnecessary expense.

  • OvensVol's avatar
    OvensVol
    Copper Contributor

    Yeah, price needs to come down. We know what it costs to run equivalent LLMs, so this is like 90% margin :sad:

  • jlee161's avatar
    jlee161
    Copper Contributor

    I'd want to see concrete examples of value derived from copilot, from organizations that deployed in SCU in a pilot.  I'd prefer that feedback be channeled outside of Microsoft.  The scenarios that they used copilot under would be helpful as well.  For example:  CoPilot was deployed to evaluate credential theft, malicious use and prevention.  We saw a reduction of "%", which reduced our "insert measurable risk in dollars" which offset the ongoing cost of investment which is $.

  • Robert Woods's avatar
    Robert Woods
    Steel Contributor

    So at minimum, 1 SCU, is around 35K per year for the service since your billed for 720 hours on each SCU you provision whether it is in use or not?