All analysis was generated autonomously, without human review. Scores are analytical opinions drawn from the cited public sources, without hands-on testing. They are not audits, certifications, investment reports, purchasing advice, or evaluations of quality.
Microsoft Agent 365 lets IT and security teams govern and secure AI agents. Available since May 2026, it inventories agents, applies access policies, and filters traffic from agents on user devices. It costs $15 per user a month with an annual commitment, and a free plan includes inventory. Microsoft reports nearly 40 million registered agents at tens of thousands of companies. Before launch, Gartner said it lacked enough new functionality to justify its price. Entra, Microsoft's directory, issues identities to agents. Gartner analyst Alastair Woolcock said other vendors would have to integrate with Microsoft's governance layer or risk having agents blocked. ServiceNow, Google, and AWS compete in agent governance. Agent 365 suits organizations running agents mostly on Microsoft 365.
How well the company can compete in its security market, scored across eight dimensions against public evidence.
| Dimension | Score | Rationale |
|---|---|---|
| Problem Clarity How precisely the company defines its problem, with evidence the problem exists at the scale claimed. | 3/5 | Microsoft names a specific buyer, the IT and security team accountable for agent risk, and Forrester and J. Gold Associates analysts describe agent sprawl as a growing management problem. The one figure attached to that pain is an IDC projection Microsoft cites, and no independent source in the record sizes the problem. [s3, s19, s1] |
| Capability Depth How specific the technical capabilities are, with evidence beyond marketing claims such as docs and third-party validation. | 3/5 | Microsoft documents the registry, lifecycle rules, conditional access for agents, audit logs, and real-time blocking of malicious tool invocations in its service description and security guidance. Gartner's pre-launch First Take, quoted by TechTarget, called many features unfinished, and Microsoft announced registry sync and runtime blocking as public previews. [s12, s22, s18, s2] |
| Market Timing Whether the market is ready for this product, with evidence that buyers are actively seeking solutions. | 3/5 | The enabler is the spread of agent-building platforms such as Microsoft Foundry, AWS Bedrock, and Google Gemini Enterprise that Microsoft described in May 2026, and Forrester and J. Gold Associates analysts called agent sprawl a growing management problem in November 2025. Microsoft reports the registration figures and cites the IDC projection, while Mason Whitaker of Microsoft partner Volt Technologies told Cloud Wars in November 2025 that his SMB customers did not yet need Agent 365. [s2, s19, s17, s1, s9] |
| Team Credibility Demonstrated domain expertise with public signals such as prior exits, publications, and industry recognition. | 3/5 | Microsoft representatives involved in the announcement and launch include Charles Lamanna, Microsoft's president of Business Apps and Agents, the three authors of the general-availability announcement, and Takeshi Numoto, whom the proxy filing credits with its launch. Microsoft moved it from announcement to general availability in under six months, and no captured source describes a prior agent-governance product these leaders built. [s19, s2, s17, s21] |
| GTM Proof Evidence of actual traction (customers, revenue signals, partnerships) beyond stated intentions. | 3/5 | Microsoft reports nearly 40 million agents registered across tens of thousands of companies, figures Microsoft reports itself without a split between free and paid use. WinBuzzer and Computerworld report a partner ecosystem, and the named organizations quoted about the product are partners and endorsers. No reference customer for the paid license appears in the cited record. [s17, s16, s11, s6, s19, s3] |
| Funding Efficiency Whether funding matches go-to-market ambition, with signs of capital-efficient growth. | 3/5 | Microsoft discloses no revenue or margin for Agent 365. Its output is visible, with general availability in May 2026 and announced availability from its UAE data centre, while the efficiency of that spending is not disclosed. [s21, s14, s15, s17] |
| Category Clarity Whether the company creates or fits a recognizable category that buyers can quickly place in their stack. | 4/5 | Analysts and reporters place Agent 365 in agent governance : Futurum calls it a governance layer, Forrester's McKeon-White describes an inventory and governance layer for Microsoft agents, and Computerworld groups it with ServiceNow, Google, and AWS offerings for governing agents. Gartner's First Take called it an evolving bundle of Microsoft capabilities, and no analyst in the cited sources names a category Microsoft defines. [s8, s18, s19] |
| Incumbent Defensibility How vulnerable the core value proposition is to absorption as a feature by a platform vendor. | 3/5 | Microsoft provides agent identities in the Entra directory enterprises already use, and Gartner's Woolcock said this pushes other vendors to integrate with Microsoft's governance layer. Rival platforms are building the same control, and Entro Security argues the control plane stays bounded by the Microsoft ecosystem, so Microsoft holds a head start through placement rather than a moat no rival platform could match. [s7, s19, s10] |
Microsoft Agent 365 addresses the growing number of AI agents that enterprise IT and security teams have to track. Microsoft says agents proliferate fast, span apps, endpoints and cloud, and often operate outside the visibility and control of the teams accountable for risk. It sells Agent 365 to those IT and security teams as a control plane for observing, governing, and securing every agent in the organization.
Independent analysts describe the same problem in qualitative terms. Forrester analyst Allie Mellen told Computerworld in November 2025 that agents were quickly becoming too many to manage manually, and J. Gold Associates founder Jack Gold said agent sprawl would become a key issue in the near future. The one figure attached to the problem comes from Microsoft, which cites an IDC projection of 1.3 billion agents by 2028.
Demand at the smaller end of the market was still forming at the announcement. Mason Whitaker, president of Microsoft partner Volt Technologies, told Cloud Wars in November 2025 that the SMB customers he works with had not deployed agents at a scale that requires Agent 365, while expecting they would need a control plane later. [s2, s3, s19, s1, s9]
Microsoft Agent 365 is a registry and policy layer that extends Microsoft's existing admin and security tools to agents. Microsoft lists a registry of every agent in the organization, an agent map, lifecycle rules that can expire inactive agents or block risky ones, onboarding with security policy templates, and access, data, and threat protection delivered through Entra, Purview, Defender, and Intune. Any agent published through Microsoft 365 channels with an Entra Agent ID appears in the inventory automatically, while agents built elsewhere need additional steps.
The paid license adds the controls that act on agents at runtime. Microsoft's service description lists policy templates, conditional access for agents, audit logs and eDiscovery of agent activity, and Defender detection with blocking of tool invocations as features that require Agent 365 or Microsoft 365 E7. Microsoft's security guidance describes real-time access decisions based on an agent's risk level and real-time blocking of malicious tool invocations, and Microsoft made Entra network controls for Copilot Studio agents and endpoint agents generally available on May 1, 2026.
Several pieces arrived as previews. On May 1, 2026, Microsoft announced public previews of registry sync with AWS Bedrock and Google Cloud and support for team-workflow agents operating with their own access. Microsoft scheduled context mapping, policy controls, and runtime blocking through Intune and Defender for public preview in June 2026. Microsoft lists Agent Management Rules and a natural-language registry search, both in public preview. Before launch, a Gartner First Take quoted by TechTarget in March 2026 said many features were unfinished and that administrators had to act on alerts manually. [s3, s12, s22, s2, s5, s14, s18]
Microsoft competes for agent governance from inside the identity and productivity stack many enterprises already run. Futurum Group analyst Dion Hinchcliffe told AI Business that the identity system Microsoft already owns is a particular strength. Gartner analyst Alastair Woolcock told Computerworld that Agent 365 forces other technology firms to either integrate with Microsoft's governance layer or risk having their agents blocked as shadow IT.
Large platform vendors contest the same role. Computerworld reported in November 2025 that ServiceNow, Google, and Amazon Web Services were all vying to offer the main tool organizations use to govern agents, and Futurum described Microsoft's choice to position Agent 365 as a governance layer rather than an agent-building platform as a distinct strategy in that market.
Agent 365's reach outside Microsoft's environment is narrower than inside it. Entro Security, in the post NHI Management Group summarizes, argues that the control plane stays bounded by the Microsoft ecosystem while enterprise agents run across AWS, GCP, SaaS, and CI/CD systems. Gartner's March 2026 First Take noted that agents created before Entra agent registration stay unmanaged unless re-created, and that some third-party providers would likely avoid outsourcing agent security to Microsoft. [s7, s19, s8, s10, s18]
Microsoft sells Agent 365 through its existing Microsoft 365 licensing. The product page lists Agent 365 at $15 per user per month, paid yearly, and Microsoft 365 E7 at $99 per user per month, and a SAMexpert licensing guide records that the standalone license requires Microsoft 365 E5, the Defender and Purview Suite for frontline workers, or Microsoft 365 Business Premium. SAMexpert describes a free foundational plan of agent identity, inventory, and basic insights for all Microsoft Cloud customers, and Microsoft's service description lists policy templates and conditional access for agents among the features that require Agent 365 or Microsoft 365 E7.
The adoption figures come from Microsoft itself. In its fiscal 2026 proxy filing, Microsoft reports nearly 40 million agents registered within two months and says Agent 365 helps tens of thousands of companies manage agents. Tony Redmond, writing for Office 365 for IT Pros, asked how many of those agents perform useful work rather than serving as experiments, and because the free foundational plan includes agent inventory, a registered agent does not by itself indicate a paid license.
Several outlets report Microsoft's partner ecosystem for Agent 365. Microsoft named launch partners whose agents arrive configured for Agent 365, including Genspark, Zensai, Egnyte, Zendesk, Kasisto, Kore, and n8n. WinBuzzer named Adobe, SAP, Zendesk, and Manus as partners building agents for it, and Computerworld reported in November 2025 that Agent 365 covers third-party agents from Adobe, n8n, ServiceNow, and Workday. The product page quotes Genspark's CEO and a statement from KPMG endorsing the product, and Microsoft's launch post quotes NTT DATA Group's head of its global AI office saying that with Agent 365 it can scale and govern AI agents. Microsoft also announced at GISEC Global 2026 that Agent 365 would be available to customers in its UAE data centre starting in October. [s3, s11, s12, s17, s16, s2, s6, s19, s15]
Named Microsoft executives present Agent 365. Computerworld quoted Charles Lamanna, Microsoft's president of Business Apps and Agents, describing it at its November 2025 announcement, and Nirav Shah, Rob Lefferts, and Jason Roszak wrote the May 2026 general-availability announcement. Microsoft's proxy filing credits Takeshi Numoto, its chief marketing officer, with taking Agent 365 and Microsoft 365 E7 from concept through launch.
The shipping record is the line's clearest evidence of execution. Microsoft announced Agent 365 in November 2025, made it generally available for commercial customers on May 1, 2026, and announced availability from its UAE data centre starting in October 2026. [s19, s2, s17, s21, s14, s15]
Agent 365 is generally available for commercial customers, and Microsoft is working toward US government authorization. Microsoft states that Agent 365 met all FedRAMP High controls reviewed by its independent assessor as of October 1, 2026. Its accrediting agency has not yet granted final authorization. Microsoft lists several paid features, including agent audit logs and Defender threat detection, as unavailable in the Government Community Cloud.
Agent 365 runs inside the Microsoft 365 admin center and the Entra, Purview, Defender, and Intune consoles, so it fits an organization that already runs those tools. Microsoft's overview says Agent 365 works best with Microsoft E5 underneath, and SAMexpert records that agents with their own mailbox and org-chart presence remain in Microsoft's Frontier preview program rather than the generally available license.
Analyst reviews before launch questioned how complete the product was. Gartner's March 2026 First Take, as quoted by TechTarget, called Agent 365 a work in progress and said Gartner had not seen enough new or dedicated functionality to justify its price, while expecting that to change as the product matures. [s21, s12, s3, s11, s18]
| Company | Relationship | Note | Compare |
|---|---|---|---|
| Aembit | competes with | Competes for the same buyer that governs credentials and access for AI agents and other non-human identities. | |
| Natoma | competes with | Competes for enterprise teams that need identity and access control for AI agents. | |
| Saviynt | competes with | Competes for organizations extending lifecycle and access review to agents. | N/AWe scored these companies at different scopes, so the totals measure different things. |
| 1Password | competes with | Competes for the agent and machine credential governance budget. | |
| Amazon Web Services | competes with | Computerworld named Amazon Web Services among the vendors vying to offer the main tool organizations use to govern agents. | N/AAmazon Web Services is scored by product line, not as a whole company, so there is no company-wide column to compare. Open its profile to compare a specific product. |
| Okta | competes with | Competes for enterprise teams extending workforce identity management to their agents. | N/AWe scored these companies at different scopes, so the totals measure different things. |
| ServiceNow | competes with | Computerworld named ServiceNow among the vendors vying to offer the main tool organizations use to govern agents. | N/AWe scored these companies at different scopes, so the totals measure different things. |
Add analyzed competitors to compare them side by side with Microsoft Agent 365.
A closer look at this line's product strategy, measuring how defensible it is against market forces and examining the eight areas behind it.
reinforce or reposition
Microsoft's advantage with Agent 365 is placement, since Microsoft provides agent identities in the Entra directory many enterprises already run. Gartner analyst Alastair Woolcock said vendors must integrate with Microsoft's governance layer or risk having agents blocked as shadow IT. Microsoft includes policy templates, conditional access for agents, and audit records in the paid license. A customer leaving the license loses those paid features and may have to set up equivalent policies elsewhere, while agent inventory stays in the free plan. Microsoft does not name a proprietary dataset behind its agent detections. ServiceNow, Google, and Amazon Web Services compete for the same governance role. Agent 365 suits organizations whose agents run mostly inside Microsoft 365.
| Dimension | Score | Rationale |
|---|---|---|
| Value Delivery Does the product sell software as the product, or judgment, trust, or accountability with software as the delivery mechanism. | 1/3 | Agent 365 is software the customer configures and runs, a registry, policy, and protection layer licensed per user at $15 a month or inside Microsoft 365 E7. Microsoft sells features rather than a managed service that takes responsibility for agent outcomes. |
| Switching Cost How expensive leaving is for a customer: data portability, integrations, learned workflows, network effects, regulatory data residency. | 2/3 | A customer that leaves the paid license loses access to the policy templates, conditional access for agents, and Purview audit and eDiscovery features it provides, and may have to set up equivalent policies in another product. The agent identity and inventory stay in the free foundational plan SAMexpert describes, and the cited record does not size what a migration to another control plane would take. |
| Compliance Moat Whether certifications, liability acceptance, or audit trails block an easy replacement. | 1/3 | Microsoft states that Agent 365 meets all FedRAMP High controls its third-party assessor reviewed, with final authorization pending, and several paid features are not yet offered in the Government Community Cloud. |
| Problem Complexity Whether the product requires ML, optimization, real-time systems, or years of specialized expertise. | 3/3 | Microsoft documents real-time access decisions based on an agent's context and risk level and real-time detection and blocking of malicious tool invocations, which are real-time security systems. Microsoft delivers them through Entra and Defender. |
| Buyer Profile Whether buyers are SMB operators, mid-market IT teams, or regulated enterprises and governments with procurement gates. | 3/3 | Microsoft builds Agent 365 for enterprise IT and security teams and positions it for regulated and government buyers. Gartner analyst Alastair Woolcock told Computerworld that companies and governments will need a control plane for multi-agent orchestration. Microsoft is opening Agent 365 in its UAE data centre as the UAE government moves its services to agentic AI, and SAMexpert writes that its audit log matters for regulated industries. FedRAMP High authorization is still pending, and Microsoft names no government buyer of the line. |
| Layer Whether the product is an end-user application, a platform with application features, or infrastructure other applications depend on. | 3/3 | Microsoft puts identity enforcement in the path of agent requests. It lists conditional access and identity protection for agents with delegated access, and data loss prevention that blocks agents from accessing and sharing sensitive content, among the core Agent 365 capabilities, and says Entra enforces real-time access decisions based on agent context and risk. Microsoft announced runtime blocking of local agents as a preview. |
| Proprietary Data, Content, or IP Whether the product accumulates datasets, content licenses, or IP that a rival cannot recreate from scratch. | 1/3 | The registry holds each customer's own agent inventory, and the cited record names no dataset, content license, or patent that Microsoft accumulates for Agent 365 across customers. Microsoft Defender supplies its detections. |
Microsoft Agent 365 is built for the IT and security teams accountable for the agents running in an organization. Microsoft pitches it as the way to move from agent experiments to enterprise-scale operations, with administration split among Microsoft 365, Entra, Purview, and Defender admins.
Customers buy the paid license on top of an existing Microsoft commitment. SAMexpert records that the standalone license requires Microsoft 365 E5, the Defender and Purview Suite for frontline workers, or Microsoft 365 Business Premium. Microsoft's overview says Agent 365 works best with Microsoft E5 underneath.
Government is a segment Microsoft is still opening. Its service description states that Agent 365 meets all FedRAMP High controls reviewed by an independent assessor as of October 1, 2026, with final authorization pending, and several paid features are not yet available in the Government Community Cloud.
Microsoft Agent 365 is a registry and policy layer over Microsoft's identity, data, endpoint, and threat tools rather than a tool for building agents. Microsoft lists a registry of every agent, an agent map, lifecycle rules, onboarding with policy templates, and access, data, and threat controls delivered through Entra, Purview, Defender, and Intune. Futurum described that governance-first position as a distinct strategic choice.
Some of those controls act on agents at runtime. Microsoft's security guidance describes real-time access decisions based on an agent's risk level, network controls that block malicious traffic from agents on user devices, and real-time blocking of malicious tool invocations. Microsoft made network controls for Copilot Studio and endpoint agents generally available on May 1, 2026.
The evidence for these controls is Microsoft's own documentation. Gartner's March 2026 First Take, as quoted by TechTarget, said many features were unfinished or restated metrics available in other admin centers, and Microsoft announced registry sync with other clouds and runtime blocking of local agents as public previews.
Microsoft sells Agent 365 as a license on top of the Microsoft 365 estate a customer already runs. Microsoft offers the license as a stand-alone subscription or inside Microsoft 365 E7. SAMexpert describes a free foundational plan of agent identity, inventory, and basic insights for all Microsoft Cloud customers, so customers can start with the inventory before buying the paid controls.
Microsoft reports broad registration. Its fiscal 2026 proxy filing states that nearly 40 million agents were registered in Agent 365 within two months, and Office 365 for IT Pros questioned how many of those agents do useful work. Because agent inventory is part of the free foundational plan, those figures do not show how many organizations pay for the license.
Partners are part of the motion. Microsoft named launch partners whose agents arrive configured for Agent 365, including Genspark, Zendesk, Kasisto, Kore, and n8n, and Microsoft says it worked with strategic partners on services that help customers onboard. Microsoft announced at GISEC Global 2026 that Agent 365 would be available to customers in its UAE data centre starting in October.
Microsoft publishes per-user prices for Agent 365. The product page lists Agent 365 at $15 per user per month and Microsoft 365 E7 at $99 per user per month, both paid yearly on an annual commitment.
Analysts questioned the price before general availability. Gartner's First Take, as TechTarget quoted it in March 2026, said Gartner had not seen enough new or dedicated functionality to justify the price, while expecting that to change as the product matures. Forrester's Will McKeon-White called the pricing a bit much.
The license also depends on a qualifying base plan. According to SAMexpert, a standalone buyer needs Microsoft 365 E5, the Defender and Purview Suite for frontline workers, or Microsoft 365 Business Premium. Microsoft includes cost management for usage-based AI spend with Microsoft cloud subscriptions.
Microsoft delivers Agent 365 as a cloud service inside the Microsoft 365 admin center, with enforcement carried out by Entra, Purview, Defender, and Intune. Any agent published through Microsoft 365 channels with an Entra Agent ID appears in the inventory automatically, and agents built outside those environments need additional steps.
Rollout of the security surface has been staged. At general availability, Microsoft announced registry sync with AWS Bedrock and Google Cloud in public preview. It scheduled runtime blocking through Intune and Defender for public preview in June 2026. Microsoft also lists Agent Management Rules and natural-language registry search in public preview. Gartner's pre-launch First Take noted that agents created before Entra agent registration stay outside Agent 365 policies unless re-created.
Agent 365's US government authorization is in progress. Microsoft's service description states that Agent 365 meets all FedRAMP High controls its independent third-party assessor reviewed as of October 1, 2026, and that final authorization by its accrediting agency is pending.
The paid license adds records an auditor can use. Microsoft lists audit logs of agent activity and eDiscovery of agent interactions, for export and hold in legal, regulatory, and investigative work, among the features that require Agent 365, though not yet in the Government Community Cloud.
The independent assessment TechTarget reported before launch was critical. Gartner's March 2026 First Take called Agent 365 a work in progress and an evolving bundle of Microsoft capabilities that comes at a premium cost.
Agent 365 extends the Microsoft platform rather than standing as a platform of its own. It governs agents through the Entra, Purview, Defender, and Intune tools a customer already runs. Gartner analyst Alastair Woolcock told Computerworld that Microsoft forces other technology firms to either integrate with Microsoft's governance layer or risk having their agents blocked as shadow IT.
Microsoft is reaching into rival clouds, so far in preview. Registry sync connects the Agent 365 inventory to AWS Bedrock and Google Cloud so administrators can discover and inventory agents there, with basic lifecycle actions such as start, stop, and delete described as coming soon.
Agent 365's reach outside Microsoft's environment is narrower. Entro Security, as summarized by NHI Management Group, argues that Agent 365 governs agents within Microsoft's ecosystem while enterprises use agents across clouds, hosted applications, and software delivery systems. Computerworld reported that ServiceNow, Google, and Amazon Web Services compete to supply the main agent-governance tool.
Named Microsoft executives lead and present Agent 365. Computerworld quoted Charles Lamanna, Microsoft's president of Business Apps and Agents, at the November 2025 announcement. Nirav Shah, Rob Lefferts, and Jason Roszak wrote the general-availability announcement. Microsoft credits Takeshi Numoto, its chief marketing officer, with taking Agent 365 from concept through launch.
Microsoft has shipped on a steady cadence since the announcement. It made Agent 365 generally available for commercial customers on May 1, 2026, and announced availability from its UAE data centre starting in October 2026.
This site is an experimental research aid created by Zeltser Security Corp. All its data gathering and analysis was performed autonomously without human review, and it can contain errors of fact, interpretation, and judgment that a human reviewer might catch.
The analyses are statements of opinion, not statements of fact. Machine analysis produced the scores, summaries, and matrix placements by weighing the public sources each page cites, and reasonable people can weigh the same sources differently. Where a page states a fact, it cites the public source and the date it was checked, and the statement is only as accurate as that source. Unless a profile expressly says otherwise, the analysis involves no hands-on testing and no independent validation of any company's products or services.
Nothing here is professional, security, legal, financial, investment, or purchasing advice, and nothing here is a recommendation to invest in, do business with, or avoid any company. Inclusion of a company is not an endorsement, and absence of a company is not a judgment about it. Reading this site creates no advisory or client relationship. Verify any detail you plan to act on against the vendor's current materials.
The content is provided "as is" and "as available," with all warranties disclaimed, express or implied, including merchantability, fitness for a particular purpose, accuracy, and non-infringement. No entry is warranted to be complete, current, or correct. Companies change, vendors update their claims, sources can be wrong, and automated analysis can misread them.
To the fullest extent permitted by law, the operator, Zeltser Security Corp, is not liable for any damages that arise from using this site or relying on its content, including direct, indirect, incidental, special, and consequential damages and lost profits, even if advised that such damages were possible. If you are dissatisfied with the site or disagree with these terms, your remedy is to stop using it.
Entries link to vendor pages, press coverage, and other external sites that Zeltser Security Corp does not control and is not responsible for. A link is not an affiliation with the destination or an endorsement of it. Product and company names and trademarks are the property of their owners, used here nominatively to identify the companies described. Short quotations from cited sources appear for identification and commentary.
Use, quotation, automated retrieval, and redistribution of the content are governed by the Terms of Use at cybercompanyprofiles.com/terms, which permit personal and internal business use with attribution and prohibit republication and resale.