Introducing the Project Perception Community
Welcome to the Project Perception Community Project Perception brings a new model for agentic security: specialized red, blue, and green team agents working together across security data, tools, and workflows to help teams uncover risk, investigate threats, and strengthen defenses. Built for real-world security operations, Project Perception gives security teams a coordinated, multi-agent approach while keeping people in control of the objectives, guardrails, and critical decisions. It brings together the speed and scale of agents with the judgment and accountability of security professionals. The Project Perception Community on Microsoft Tech Community is where that vision comes to life. Security practitioners, customers, partners, and Microsoft product and engineering teams can explore what is possible, learn from real-world experiences, and help shape the future of multi-agent defense. What you will find here Product news and release updates Guidance for getting started with Project Perception Demos and technical walkthroughs Customer stories and lessons Perspectives from Microsoft product and engineering teams Connection with peers in the technical community AMAs, questions, and discussion with the broader security community See Project Perception at Microsoft Ignite Join us in San Francisco or online from November 17-20, 2026. The sessions below cover how Project Perception works, where it fits in the security stack, and how red, blue, and green team agents work together across the security lifecycle. Register for Microsoft Ignite Microsoft Security at Ignite Ignite session catalog Scan a QR code or use the links below to plan your schedule. View the Microsoft Security Ignite guide Browse the Ignite session catalog Featured Project Perception sessions Session Code When What it covers Project Perception Roadmap: New Capabilities, Use Cases & What’s Next BRK323 Tuesday November 17th, 2:00 PM PT -2:45 PM PT See the Microsoft agentic security roadmap and the next set of Project Perception capabilities and use cases. Project Perception: How Agentic Security Works BRK318 Thursday November 19 th , 9:00 AM – 9:45 PM PT See how specialized red, blue, and green team agents share security context to expose weaknesses, investigate threats, and strengthen defenses. Project Perception Live: From Exposure to Protection LTG1225 Thursday November 19 th , 11:00 AM PT -11:15 AM PT Watch Project Perception agents move from uncovering risk to a prioritized plan for protection. Turn signal into real-time protections with Project Perception Lab Thursday November 19 th, 9:00 AM PT – 10:15 AM PT Work through how Perception agents understand risk and turn findings into protection. Other sessions connected to the Project Perception story BRK319 - Find and fix code vulnerabilities faster with Codename MDASH BRK322 - Stay ahead of endpoint risk with AI-powered discovery and remediation BRK316 - Winning the Race Against Time with Autonomous Protection BRK324 - The Alert Is Dead: The Blueprint for the Agentic SOC Protect continuously and proactively with multi-agent defense (theater session) Join the community Visit the Project Perception Community to follow product updates, ask questions, share what you are learning, and connect with Microsoft experts and other security practitioners.Fight AI with AI | Multi-Agent Security Defense
Point red, blue, and green AI agent teams at a known threat actor, confirm which vulnerabilities attackers can reach, then deploy KQL detections, harden your posture, and merge a tested code fix in minutes with Microsoft Defender. Stay in control and approve key actions before agents run them. Run Microsoft’s pre-built playbooks or build your own, and manage sessions from the Defender portal or from your terminal with the MCP plug-in. Keep token costs low with MAI Cyber Flash, a purpose-built security model inside MDASH. Dave Weston, CVP Microsoft Security, shares how Microsoft’s threat intelligence and incident response expertise power agents you direct. One prompt. Full adversary emulation. Perception agents mimic a known threat actor against your environment and check in with you before any high-impact action. Watch here. Detections deployed. Posture hardened. Code fix merged. Perception agents turn hours of work across hunters, engineers, and app owners into minutes, while you stay in control. Check it out. Find it, patch it, prove it. MAI Cyber Flash handles the full vulnerability loop inside MDASH and keeps token costs low so any team can afford AI-powered defense. Start here. 👥 Who it’s for: SOC analysts, security engineers, and red and blue teamers evaluating agentic AI for defense, plus AppSec and DevSecOps teams who own vulnerability remediation. ⏱️ Chapters: 00:00 Fight AI-powered attacks with AI agents 00:45 How AI attacks adapt mid-breach 01:39 Jailbroken and abliterated models 02:04 Inside the Project Perception security stack 03:28 Red, blue, and green agent teams 04:07 Playbooks that orchestrate agent workflows 04:43 Ask Perception if you’re protected 06:06 Red team agents emulate a threat actor 06:59 Approve high-impact agent actions 07:26 MDASH findings confirm reachable vulnerabilities 08:22 Blue team agent writes KQL detections 08:54 WAF, auth check, and tested code fix 09:36 Pull request merged into production 10:14 Session reports and MCP terminal plugin 11:02 MAI Cyber Flash keeps token costs low 11:57 Join the Project Perception preview AI helps attackers find, weaponize, and exploit vulnerabilities at a speed and scale no human team can match. Jailbroken and abliterated models generate custom tooling that adapts mid-breach, leaving defenses that hunt for known techniques chasing a target that changes every time. Project Perception answers with a full agentic security stack. It starts with trillions of daily security signals, correlates them in the Microsoft security graph, and uses multiple AI models, including purpose-built ones, to reason over risk and prioritize what matters most. Specialized agents act on that reasoning: red team agents simulate attacks and prove where you’re vulnerable, blue team agents investigate and build detections, and green team agents harden posture and remediate. Playbooks orchestrate them through proven SOC workflows, and codified actuators let agents perform the fix instead of only recommending it. In the demo, one prompt, “Is my organization protected against Onyx Sleet?”, launches threat intelligence, reconnaissance, and pen test agents. They pull MDASH code-scanning findings and confirm an internet-exposed SQL injection. A detection authoring agent writes KQL detections to cover the gap, and the posture remediation agent shields the app with a web application firewall, adds an authorization check, and produces a tested code fix merged through a pull request. Agents stop and ask before any high-impact action, so you stay in control. Every session produces a shareable report with the attack path, remediation plan, and timeline. An MCP tool plugin runs the same work from your terminal, and MAI Cyber Flash, a dedicated cybersecurity model inside MDASH, handles most vulnerability work to keep token costs low. 🔗 Related links: Get started at https://microsoft.com/perception Unfamiliar with Microsoft Mechanics? Microsoft’s Official Video Series for IT — Subscribe https://www.youtube.com/c/MicrosoftMechanicsSeries — Microsoft Tech Community: https://techcommunity.microsoft.com/t5/microsoft-mechanics-blog/bg-p/MicrosoftMechanicsBlog — Podcast: https://microsoftmechanics.libsyn.com/podcast Join us on social: — https://twitter.com/MSFTMechanics — https://www.linkedin.com/company/microsoft-mechanics/ — https://www.instagram.com/msftmechanics/ — https://www.tiktok.com/@msftmechanics Video Transcript: - AI has given attackers better weapons than they’ve ever had to quickly find, analyze, and automate the exploits for vulnerabilities at a speed and scale that isn’t humanly possible. But there is a way to address this imbalance with a new agentic security system called Project Perception, which provides the know-how and skills needed to fight weaponized AI with AI, and at the speed of AI. Now joining me to go deeper is our chief hacker and cybersecurity leader, Dave Weston. Welcome back to Mechanics. - Thanks, super happy to be here. - Last time you were on the show, AI-powered attacks, they weren’t really top of mind like they are now. But today, AI is helping attackers move a lot faster and at greater scale across virtually every single attack vector. So, what are you seeing out there? - Well, it really is a different world now, and that’s just not hype or marketing, it’s truth. AI is good at code, cyber is code, and the attackers are putting AI to work. The automated attacks we’re seeing where AI can adapt and evolve its techniques while moving through your environment are particularly worrying. For example, we saw a recent attack involving multiple hacking attempts on Mexican government organizations. And one of the craziest aspects of the attack was where AI generated bespoke tooling with a massive 17,000 lines of code across 49 different modules, meaning it adapted mid-attack, corrected its own failures, and built new capabilities as it moved through the breach. That’s a problem for traditional defenses. If you’re looking for known techniques, what do you do when the technique changes every time? The rules of cyber have changed, and today, the advantage is with the attacker. - All right, so how are attackers, then, able to use AI to their benefit? Aren’t they just using publicly available models? - They are, but they can easily jailbreak models in real time or permanently obliterate open models, where you’re modifying the LLM to remove any guardrails that stop them from doing bad things. - Right, and then at that point, the model can just do their bidding, whatever that is. - It can do whatever evil command you throw at it. So, really, the answer is to offset and fight AI with AI. If attackers are operating at machine speed, then defenders need to be as well. And that’s why we built a new cybersecurity stack with Project Perception based on Microsoft’s security expertise, threat intelligence, and incident response knowledge. The stack starts with trillions of security signals that Microsoft logs and processes every day. And we take that massive volume of data and transform it into rich, correlated security context with our security graph so it can be easily consumed efficiently without breaking the bank with tokens. We then have multiple AI models, including purpose-built ones that reason over the context to identify risk and prioritize what matters most. Then, we have specialized agents themselves that take model reasoning and can simulate attacks, build detections, author fixes, and even more. And playbooks orchestrate those agents through proven security workflows built from years of real-world security operations. And importantly, to close gaps, we have codified actuators with APIs that allow agents to perform the fix, instead of just telling you how to fix something. - So, it’s a continuously learning security system that’s really identifying risk, adapting to changing conditions, and coordinating investigation and response at scale. - Totally, and I can explain the mechanics of Perception and its components in Defender, starting with the agent team that we built. Here, under Agents, you get a picture of what runs the solution. Red team agents with red icons are designed to simulate attacks on your environment. They find the attack paths, prove where you’re actually vulnerable, and prioritize incidents by severity and exploitability. Then, the blue team agents defend. They conduct investigations, event correlation, accelerate a response, and build automated detections for you. Finally, the green team agents are the fixers. They harden your posture and remediate ahead of the attack. These agents are all specialists on their own, but they need guidance for what to work on or to focus in on. And that’s where playbooks come in. Playbooks are similar to the way people run their SOC today, standardized sets of procedures and operations to reach a known outcome. In this case, though, the work is done by teams of red, blue, and green agents. And the icons in these playbooks show you which agents are involved in which workloads. The playbooks that you’re seeing here are prebuilt by Microsoft for common security tasks, and you can build your own from scratch or after you run an agent session. - So, we know from your examples that the bad guys have agents and automation routines. And now we, or now you, the good guys, also have them, too. So, now we explained how it works. Can we run it? - Yeah, sounds good. So, when the threat actors are trending, the first question you hear is, “Are we protected from this adversary?” Instead of burning all the time and resources to manually figure this out, this is where Perception comes in as a multiplier. I’ve got Perception open in the Defender portal and I’m going to start a new agent session. Here, I can describe a task for my agents to work on, I can see top insights as recommended actions to take, or I can pick a playbook from below. In this case, I know that a threat actor named Onyx Sleet has been targeting a lot of companies in my industry. So, I’ll type in my prompt, “Is my organization protected against Onyx Sleet?” I hit Submit, and the agent team is off to the races. The planning agent works out what needs to happen and picks the right playbook to protect against the threat. This playbook triggers a threat intelligence agent to analyze the threat actor, red team agents for reconnaissance and to mimic the attacker for pen testing, a blue team agent for detections, and green agents for posture remediation with code fixes. Now, I just need to start my session using the details that are already populated. Right away, we see that this starts writing a session report that I’ll show once we’re finished. There’s a set of indicators from the threat intelligence agent on Onyx Sleet with all of the IPs, domains, and hashes. I’ll close that out to keep going. This information gets passed to the red agents, which are your attack simulators. It takes a profile and asks, “If I were Onyx Sleet, how would I breach this environment?” So, the reconnaissance agent takes a look at the indicators, and it spotted an exposed billing application. And it went after it, because Onyx Sleet likes to target web application vulnerabilities. Now, it wants to hand off to a pen test agent that knows how to specifically target this application to evaluate whether the billing app can actually be compromised. And notice, it brings me into the loop to ask my permission first. - Right, now that’s the runbook that we’ve just seen, which kind of harnesses all of your bespoke team of red and blue and green team agents. But you were also brought into the equation effectively to take one action here, in this case. So, how much of the approving do you do manually, versus just letting the agent do its thing and run YOLO? - Yeah, so any time there’s an operation of consequence, the agent will stop and ask. As the human in the loop, I can steer the process, confirm the agent’s reasoning and assumptions, and approve the actions. Governance and trust are the whole ballgame, here. So, I’ll allow this one to analyze the URL endpoints and submit it, and the recon agent will send its findings over to the pen test agent for penetration testing against this web app. The first thing it does is pull some previously discovered vulnerabilities found by MDASH, our multi-model agentic scanning system to detect code vulnerabilities, which also uses teams of agents to do the code scanning. So, we hand its findings to the pen test agent at runtime, and it narrows a big funnel of potential risk to the few that are genuinely reachable from the outside that this actor is likely to target. So, here it’s tested what MDASH flagged and confirmed the SQL injection is real and internet-exposed, alongside stored cross-site scripting vulnerabilities and a couple of identity-related issues. Now, a lot of systems will stop right here. They might be great at finding problems, but what really matters is going from finding to fixing. - So, we saw here in this case that the billing system is likely to be compromised. So, how do we go about actually fixing it so that it’s not vulnerable to attack? - Well, fortunately, with Perception, we don’t just point out problems. First, it’ll kick off to a blue agent, our detection authoring agent, which writes custom detections for each of the vulnerabilities to discover those later. There’s almost always a delay between discovering a vulnerability and actually shipping the fix. Detections buy us coverage during that window so we can see anyone knocking on the specific door related to that vulnerability. It’s authored detections, in this case, and each are coded by agents using KQL, which is great if you’re a security expert, but not a coding expert. These agents will do all that for you. Next, you’ll see that our green team posture remediation agent, as the fixer starts working on how to block the attack surface that the pen test agent exposed earlier in our billing app. In fact, here’s the remediation plan. It suggests shielding the app immediately with a web application firewall to block the SQL injection, and we can switch that to blocking mode and add an authorization check. That’s our second layer of defense. Then, the last step is an actual code fix to parameterize invoice queries. And not only do we get the code change, but we’re also able to run tests to validate the fix before we push it into production. Back in the chat, I’m good with what it recommends, so I’ll allow it. Then, Perception creates the pull requests to fix the SQL injection and merge all those changes into our production code. - And that’s taking what could have been multiple hours, sometimes days with cybersecurity experts, it’s getting that done just in a few minutes. - 100%, in fact, I’ve spent multiple hours and days on this, so that’s hours of manual work across hunters, remediation engineers, and app owners. And here, we discovered the issues, prioritized them, deployed detections, hardened postures, and even produced a code fix. The agents did the work. I just hung back, steered, and authorized specific requests a few times to proceed. And each session creates a report that you can refer back to or share. It explains who the actor was, what they did, their attack path, and it lays out the full remediation plan, along with the steps that were already taken and a detailed timeline. All your sessions can be viewed in one place where you can see what’s in progress and which sessions are awaiting human input to proceed, as well as all the sessions that Perception has completed. And because a lot of people live in the terminal, we also ship an MCP tool plugin so you can kick off and manage the same work from the command line or the tools you already use to stay in sync. - Right, so now instead of agents just triaging your alert queue, they can take action by using your guidance and codifying useful protection. So, with all this, what’s next? - Yeah, as a rule, with Perception, we always want to perform the fix and keep token usage as low as possible so that any organization can use it. And to that aim, we’ve been working with our model team on a dedicated MAI cybersecurity model. It’s called Cyber Flash, and it runs inside MDASH. And it handles roughly 90% of the queries, finding the vulnerability, patching it, and proving the fix is valid, and it defers only the hardest 10% of tasks to a much larger and much more expensive frontier model, which, in turn, keeps costs to a minimum. And it’s actually leading the CyberGym benchmark at around 96%, where most of the market sits considerably lower. So, cost effectiveness is baked into our focus. We want to level the playing field in how you’re able to defend against AI-powered attacks. - So, now we have something that keeps up with attackers to defend against auto-generated, CVE-informed attacks. So, for anyone who’s watching right now looking to get these defenses up and running in their environments, what do you recommend? - This is a rapidly evolving space, but Perception is in preview worldwide now. So, head over to aka.ms/perception to find out more and sign up. - Thanks so much for joining us today. It’s always eye-opening when we have you on the show to show the latest defenses. And thank you for joining us today, and be sure to subscribe to Mechanics if you haven’t already, and we’ll see you again soon.Unified AI Defense: Security Copilot, Project Perception, and MDASH
Executive Summary This triumvirate of tools present a cohesive and unified platform that tells a compelling story: Microsoft Security Copilot as the assistive AI experience and extensible agent platform for security and IT work; Project Perception as the coordinated multi-agent defense system that executes Red, Blue, and Green workflows. MDASH as the specialized multi-model agentic code-scanning harness for discovering, validating, proving, and helping remediate exploitable source-code vulnerabilities. Security Copilot helps analysts and teams ask, summarize, investigate, report, and extend workflows. Project Perception coordinates agents that reason and act across the defense lifecycle. MDASH feeds high-confidence vulnerability findings into broader security workflows, including Project Perception. Simple distinction Security Copilot assists the human. Project Perception coordinates the defense workflow. MDASH finds and validates software vulnerabilities. Platform Description Security Copilot AI that assists security and IT teams through natural-language investigation, summarization, promptbooks, plugins, embedded experiences, and extensible agents across Microsoft Security products. Project Perception AI that acts through coordinated multi-agent defense, using Red, Blue, and Green agents to expose gaps, investigate threats, remediate, and harden with humans in control of critical decisions. MDASH AI that finds and proves code vulnerabilities through a multi-model agentic scanning harness focused on source-code vulnerability discovery, validation, deduplication, proof, prioritization, and fix guidance. Relationship Model Security Copilot, Project Perception, and MDASH should not be positioned as interchangeable AI security tools. They sit at different layers of the security operating model: Security Copilot is the broad assistance and agent platform across Microsoft Security experiences; Project Perception is the coordinated multi-agent defense system for continuous defense; MDASH is the specialized code-security harness whose findings can feed Project Perception workflows. Layer Role How it connects Security Copilot Assistive AI and extensible agent platform Provides the user-facing experience, promptbooks, plugins, reporting, investigation help, and custom/Microsoft-built agents. Project Perception Coordinated multi-agent defense system Coordinates Red, Blue, and Green agents across exposure discovery, investigation, prioritization, remediation, and hardening. MDASH Specialized source-code vulnerability scanner Produces validated vulnerability findings and fix guidance that can inform broader Project Perception workflows. Detailed Comparison Matrix Category Security Copilot Project Perception MDASH Primary purpose Improve defender efficiency through generative AI assistance, embedded experiences, plugins, promptbooks, and agents. Coordinate specialized Red, Blue, and Green agents across the security lifecycle. Discover, validate, prove, prioritize, and help remediate exploitable source-code vulnerabilities. Core operating model Natural-language assistant and extensible agent platform. Coordinated agent playbooks and workflows with shared security context. Multi-model, multi-agent code-scanning pipeline. Primary users SOC analysts, threat hunters, IT admins, data security admins, identity teams, and teams building custom agents. Security operations, exposure management, posture, and incident response teams. AppSec, DevSecOps, product security, engineering, and authorized security teams. Inputs Prompts, incidents, alerts, logs, threat intelligence, plugins, policies, and product context. Security signals, threat intelligence, organizational context, sensors, models, agents, and approved actions. Source repositories or code folders, scan configuration, model outputs, code context, and vulnerability signals. Outputs Summaries, reports, investigations, KQL/query help, recommendations, and agent-generated results. Exposure findings, investigations, triage, detections, remediation/hardening recommendations, and approved actions. HTML/SARIF outputs, severity/confidence details, affected paths, proof details, and remediation suggestions. Strength Breadth and usability across Microsoft Security workflows. End-to-end coordinated defense across agent roles. Depth in software vulnerability discovery and exploitability validation. Best fit Productivity, explanation, reporting, analyst assistance, and workflow extension. Machine-speed coordinated defense for mature security operations. Deep application security and secure engineering workflows. Overlap Analysis Shared AI security reasoning All three use AI for security reasoning, but at different levels. Security Copilot grounds analyst-facing assistance through prompts, plugins, connectors, and organization context. Project Perception coordinates agents across security workflows. MDASH uses a specialized multi-model harness for code vulnerability analysis and proof-oriented validation. Investigation and analyst assistance Security Copilot and Project Perception overlap most clearly around investigations. The difference is the operating model: Security Copilot is optimized for human-assisted investigation; Project Perception is optimized for coordinated multi-agent workflows. Vulnerability discovery and remediation MDASH and Project Perception overlap around vulnerability discovery, exploitability validation, prioritization, and remediation. MDASH focuses on code vulnerabilities, while Project Perception can use MDASH findings with threat intelligence and broader security context to prioritize and drive remediation actions. Agent orchestration Security Copilot agents automate specific security and IT tasks. Project Perception coordinates Red, Blue, and Green defense agents across end-to-end workflows. MDASH orchestrates specialized scanning agents inside the code vulnerability pipeline. Scenario-Based Guidance Scenario Lead with Reason Faster SOC investigation, summarization, reporting, KQL help, and embedded assistance Security Copilot Best when the goal is analyst productivity and guided work inside existing Microsoft Security experiences. Deep source-code vulnerability discovery and exploitability validation MDASH Best when the organization has large code estates and needs richer AppSec analysis than traditional scanners alone. Coordinated Red/Blue/Green defense workflow across security domains Project Perception Best when the organization is ready for agentic defense workflows that identify, investigate, prioritize, and reduce risk. Organization asks whether Project Perception is just Security Copilot Clarify distinction Security Copilot assists; Project Perception coordinates agentic defense workflows. Organization asks whether MDASH is the same as Project Perception Clarify layered relationship MDASH produces code vulnerability findings; Project Perception operationalizes findings in broader defense workflows. Organization wants a complete agentic security story Combination Use Security Copilot for interaction and extensibility, Project Perception for coordinated defense, and MDASH for code vulnerability signals. How to position these AI offerings Lead with Security Copilot for analyst productivity, MDASH for source-code vulnerability discovery, and Project Perception for coordinated agentic defense. Project Perception is not a Security Copilot rebrand. Position the product as a distinct multi-agent defense system that complements Security Copilot. Each of these products complement each other rather than replace any of them. MDASH is not a general SOC platform. In essence, it is a specialized code vulnerability discovery and validation capability. Organization maturity Primary message Recommended offering Early AI/security productivity Use AI to help analysts and IT teams work faster inside the tools they already use. Security Copilot Mature SOC / Defender-centric operations Move from task assistance to coordinated defense workflows with agents that expose, investigate, and harden. Project Perception Strong engineering/AppSec focus Use AI to find, validate, prove, prioritize, and help remediate vulnerabilities in code repositories. MDASH Strategic AI-era security transformation Combine assistive AI, agentic defense, and deep code security. Combination Summary Security Copilot is a great entry point for organizations starting their Frontier journey and how AI can empower their security analysts, investigations and autonomous agent deployments. Project Perception is a coordinated agentic defense system. MDASH is a specialized code-security analysis engine. A simple, concise explanation would be: Copilot assists humans analyzing vast amount of security sources, MDASH discovers software vulnerabilities at machine speed level, and Project Perception coordinates security agents to determine what’s exploitable before an attacker does. Additional insights The newly updated documentation adds a clearer operating model for Project Perception: a continuous cycle to perceive risk, reason across security context, and act with human oversight. It also describes the underlying cyber stack and the role of the purpose-built MAI-Cyber-1-Flash model. Perceive, reason, and act Perceive: Continuously identify emerging risk across endpoints, identities, clouds, applications, and broader security signals. Reason: Apply threat intelligence, organizational context, and security signals to determine which risks are meaningful. Act: Help defenders move from findings to protective action faster, while retaining human judgment and approval for high-impact decisions. The new cyber stack Layer Role in Project Perception Field positioning cue Signals and sensors Provide visibility across endpoints, identities, clouds, applications, data, and AI. Start with the breadth of the digital estate. Security context Connect signals, threat intelligence, and organizational knowledge so agents can reason with operational context. Context turns raw signals into relevant understanding. Models Use a multi-model approach, including specialized cybersecurity reasoning. Select the right model for the task rather than relying on one model. Harness Orchestrate models and agents with the tools and controls required for reliable operation. The harness coordinates workflow, evaluation, and control. Agents Apply Red, Blue, and Green roles across discovery, investigation, response, remediation, and hardening. Agents are specialized roles working as one defense team. Actuators Translate decisions into real-world protective effects, not only recommendations. Actions remain governed and subject to the appropriate oversight. MAI-Cyber-1-Flash and the MDASH relationship MAI-Cyber-1-Flash is a Microsoft purpose-built cybersecurity model optimized for software vulnerability analysis. It operates as one model within the multi-model MDASH system, supporting selected stages of vulnerability discovery and analysis. MAI-Cyber-1-Flash provides specialized reasoning, while MDASH coordinates multiple models and scanning agents, and Project Perception connects those findings to broader defense workflows. Governance and human control Human oversight remains part of the operating model, especially for critical or high-impact actions. Agent activity should be positioned as governed, logged, auditable, and aligned to least-privilege access. Project Perception is designed to inherit enterprise security, governance, privacy, and compliance foundations rather than operate outside them. Appendix A: Project Perception Agent Roles and Relationship to Security Copilot and MDASH Understanding the Red, Blue, and Green Agents Project Perception is built around a coordinated virtual team of specialized AI agents. Just as human security organizations employ Red Teams, Blue Teams, and Security Engineering functions, Project Perception introduces AI agents that perform analogous activities at machine speed while maintaining human oversight for critical decisions. Red Agents Red Agents are responsible for identifying weaknesses before attackers can exploit them. Typical activities: Discover attack paths Identify exposed assets Detect privilege escalation opportunities Analyze risky configurations Correlate exposures across systems Surface previously unknown attack opportunities Business value: Red Agents help organizations move from reactive security to proactive exposure management by continuously searching for conditions that could enable compromise. Blue Agents Blue Agents investigate and validate risk. Once a potential exposure or threat is identified, Blue Agents determine whether it represents a meaningful security concern. Typical activities: Analyze alerts and incidents Correlate telemetry Validate exploitability Assess likelihood of attack Prioritize findings Evaluate business impact Generate investigative conclusions Business value: Blue Agents reduce alert fatigue and help security teams focus on the threats and vulnerabilities that present the highest operational risk. Green Agents Green Agents focus on remediation and hardening. After a risk has been identified and validated, Green Agents help eliminate or reduce that risk. Typical activities: Recommend fixes Validate remediation strategies Propose configuration changes Reduce attack surface Improve security posture Coordinate hardening activities Track remediation progress Business value: Green Agents help close the gap between identifying a problem and fixing it, accelerating risk reduction across the environment. Overlap with Security Copilot Security Copilot and Project Perception share some capabilities but are optimized for different operating models. Security Copilot is fundamentally an analyst-facing experience whose primary objective is to make humans more effective. Incident investigation Threat hunting Alert analysis Report generation Threat intelligence research Security summarization Security operations assistance Workflow automation through Security Copilot agents Positioning statement Security Copilot helps security professionals perform their jobs faster and more effectively. Area Security Copilot Project Perception agents Positioning Red overlap Assists analysts in understanding exposure data. Red Agents proactively discover exposures and attack opportunities. Security Copilot explains the exposure; Red Agents discover the exposure. Blue overlap Helps analysts investigate incidents and alerts. Blue Agents investigate as part of coordinated defense workflows. Security Copilot helps analysts investigate; Blue Agents investigate as part of the defense system. Green overlap Recommends remediation actions and implementation guidance. Green Agents coordinate remediation and hardening activities. Security Copilot recommends fixes; Green Agents drive remediation activities. Overlap with MDASH MDASH differs significantly from Security Copilot because it is focused specifically on software and source-code security. Its mission is vulnerability discovery, exploitability validation, and remediation guidance rather than general security operations. Area MDASH Project Perception agents Positioning Red overlap Identifies software weaknesses in source code. Red Agents evaluate broader attack surface across identity, endpoint, cloud, network, applications, and configuration weaknesses. MDASH identifies software weaknesses; Red Agents identify security weaknesses across the environment. Blue overlap Validates vulnerabilities and exploitability from a software perspective. Blue Agents validate operational risk using endpoint telemetry, identity exposure, threat intelligence, business impact, and attack paths. MDASH validates vulnerabilities; Blue Agents validate operational risk. Green overlap Provides code-level remediation guidance. Green Agents focus on broader environmental remediation and hardening. MDASH fixes code; Green Agents reduce organizational risk. Capability Comparison Matrix Capability Security Copilot Red Agents Blue Agents Green Agents MDASH Natural language interaction Primary No No No Limited Analyst assistance Primary No Limited Limited No Exposure discovery Limited Primary Limited No Code-focused Attack path analysis Limited Primary Yes No Limited Vulnerability discovery Limited Limited Limited No Primary Incident investigation Yes Limited Primary No Limited Alert triage Yes No Primary No No Risk prioritization Yes Limited Primary Limited Yes Exploitability validation Limited Limited Yes Limited Primary Remediation guidance Yes No Limited Primary Yes Code fix recommendations Limited No No Limited Primary Security hardening Limited No Limited Primary Limited Multi-agent orchestration Limited Yes Yes Yes Internal scanning agents End-to-end security lifecycle coverage Partial Partial Partial Partial No Final Takeaway Simple explanation In simple terms: Security Copilot assists humans. MDASH discovers software vulnerabilities. Project Perception coordinates security agent's activities and actions. Within Project Perception, Red Agents identify weaknesses, Blue Agents determine what matters, and Green Agents reduce risk. Technical Resources Getting started with Project Perception Project Perception FAQ Codename MDASH Overview Introducing MAI-Cyber-1-Flash inside MDASH Getting started with Security Copilot Security Copilot is now included for Microsoft 365 E5 and E7 organizations The AI Strategy Roadmap: Five drivers of successful AI transformation The AI Strategy Roadmap: How organizations are achieving Frontier Transformation (pdf)
