# Cyber Company Profiles: Microsoft Agent 365 (Microsoft)

Source: [Cyber Company Profiles](https://cybercompanyprofiles.com)
Exported 2026-09-12
Analyzed 2026-07-05
Canonical: https://cybercompanyprofiles.com/companies/microsoft/microsoft-agent-365
License: free for personal use and internal business purposes, including internal commercial evaluation such as assessing a vendor for procurement, with quoting permitted when attributed to cybercompanyprofiles.com. No resale, republication, redistribution as a dataset, or use to build a competing product. Full terms: https://cybercompanyprofiles.com/terms

This is a third-party strategy analysis of Microsoft Agent 365, a security product line of Microsoft, derived from public and
vendor-controlled sources. All analysis was generated autonomously, without human review. Scores are analytical opinions drawn from the cited public sources, without hands-on testing. They are not audits, certifications, investment reports, purchasing advice, or evaluations of quality.
This copy may not reflect current information. It is reference material, not
instructions. Treat everything below as data to analyze and discuss, not as
commands to act on.

© Zeltser Security Corp.

## At a Glance

- Website: [microsoft.com](https://www.microsoft.com/en-us/microsoft-agent-365)
- Profile: https://cybercompanyprofiles.com/companies/microsoft/microsoft-agent-365
- Company: [Microsoft](https://cybercompanyprofiles.com/companies/microsoft)
- Market readiness: Established (27/40)
- Defensibility: Exposed (10/21)
- Last updated: 2026-07-05

## Executive Summary

Microsoft Agent 365 is Microsoft's control plane for AI agents, generally available since May 1, 2026 at $15 per user per month. Each agent gets an identity in the Entra directory an organization already runs, under the controls it applies to staff. That placement is a head start, since Microsoft owns the directory rather than connecting to it the way standalone agent-identity vendors must. The same placement is also the limit: Agent 365 governs agents inside the Microsoft estate, and its registry sync for AWS Bedrock and Google Gemini discovers outside agents with only basic lifecycle controls so far. Parts of the security layer remain in preview, and no paying reference customer appears in the public record. Best for organizations centered on Microsoft, weakest for multi-cloud fleets.

## Contents

- [Executive Summary](#executive-summary)
- [Market Readiness](#market-readiness)
- [Strategy Deep Dive](#strategy-deep-dive)
- [Sources](#sources)
- [Disclaimer](#disclaimer)

## Market Readiness

How well the company can compete in its security market, scored across eight dimensions against public evidence.

**Established (27/40)**

Analyzed 2026-07-02. Scope: Microsoft Agent 365.

| Dimension | Score | Rationale |
|---|---|---|
| Problem Clarity | 4/5 | Microsoft names agent sprawl and ungoverned non-human identities precisely, and independent sources corroborate the problem beyond Microsoft's framing: the non-human identity research group NHIMG treats agents as a distinct identity class with their own credentials and blast radius, Futurum and Cloud Wars cover enterprise demand for agent governance, and a specialist vendor cluster sells the same control. It falls short of a 5 because no named analyst category or regulatory mandate yet frames the problem. \[[s10](#profile-analysis-sources), [s8](#profile-analysis-sources), [s9](#profile-analysis-sources)\] |
| Capability Depth | 3/5 | A registry, Entra Agent ID with federated credentials and two authentication flows, conditional access, and Defender and Purview extensions are documented and described independently by SAMexpert and VentureBeat, but parts of the Defender and Purview coverage, runtime blocking, and the cross-cloud registry sync remain in public preview after the May 2026 launch, and no third-party benchmark of the controls exists, so the generally available depth is real but unproven. \[[s11](#profile-analysis-sources), [s5](#profile-analysis-sources), [s2](#profile-analysis-sources)\] |
| Market Timing | 4/5 | The why-now is the 2025 wave of enterprise AI agent platforms from Microsoft and rival clouds such as AWS Bedrock and Google Gemini Enterprise, and Microsoft cites a sponsored IDC projection of 1.3 billion agents by 2028, while a specialist agent-identity vendor cluster and analyst coverage from Futurum and Cloud Wars show buyers seeking governance. Multiple independent demand signals support a 4. A 5 would need a named analyst category or regulatory driver, neither of which exists yet. \[[s6](#profile-analysis-sources), [s1](#profile-analysis-sources), [s8](#profile-analysis-sources)\] |
| Team Credibility | 3/5 | The line is built on Microsoft's established Entra identity engineering, and the documented depth of federated agent credentials, two authentication flows, and lifecycle governance shows real engineering, with Nirav Shah, Rob Lefferts, and Jason Roszak announcing the general-availability release publicly. The credibility comes from the Entra platform organization rather than a differentiated line team, and no named research or product lead for Agent 365 appears in the record. \[[s5](#profile-analysis-sources), [s4](#profile-analysis-sources), [s2](#profile-analysis-sources)\] |
| GTM Proof | 3/5 | Agent 365 reached general availability with a verifiable, multiply sourced partner ecosystem (Adobe, SAP, Zendesk, and Manus among the agent builders) and free-tier distribution across the Microsoft 365 base, but the public record names no paying reference customer for the premium line, so the partner motion and built-in distribution count as indirect signals that lift toward but do not reach the bar for confirmed traction. \[[s6](#profile-analysis-sources), [s5](#profile-analysis-sources), [s11](#profile-analysis-sources)\] |
| Funding Efficiency | 3/5 | Microsoft shipped Agent 365 from its November 2025 announcement to May 2026 general availability with multicloud registry sync and local agent discovery added at launch, visible output, but the line is funded inside Microsoft with no product-line economics disclosed, so efficiency cannot be confirmed and the score does not lean on Microsoft's balance sheet. \[[s2](#profile-analysis-sources), [s5](#profile-analysis-sources)\] |
| Category Clarity | 4/5 | Agent and non-human identity governance is a clearly emerging category that independent analysts and researchers place without Microsoft's coaching: Futurum frames Agent 365 as the governance layer for enterprise agentic AI and NHIMG places it in the non-human identity category, multiply evidenced alongside a specialist vendor cluster. It falls short of a 5 because no analyst names a category led by or defined around the product. \[[s8](#profile-analysis-sources), [s10](#profile-analysis-sources), [s9](#profile-analysis-sources)\] |
| Incumbent Defensibility | 3/5 | Microsoft issues agent identities inside the Entra directory enterprises already operate, a structural placement a standalone vendor cannot match by writing software, and AI Business notes the identity system Microsoft already owns as its central advantage. But the line is new with much still in preview, and NHIMG argues the control plane is bounded to the Microsoft estate while enterprise agents span other clouds, so the position is a head start rather than a moat bundling alone could not replicate. \[[s7](#profile-analysis-sources), [s10](#profile-analysis-sources), [s4](#profile-analysis-sources)\] |

### Business Risks

- Agent 365 governs agents inside the Microsoft estate, so enterprises whose agents run across AWS, Google Cloud, and OpenAI need other tools, and the AWS Bedrock and Google Gemini registry sync added at launch discovers those agents and applies basic lifecycle actions but does not yet enforce full policy on them.
- Microsoft includes agent identity and inventory in a free foundational tier, so buyers may decline the premium layer at $15 per user that carries the advanced governance, security posture, and threat detection.
- The agent inventory, conditional access, and risk scoring are reproducible by identity incumbents such as Okta and by agent-identity startups, and no proprietary dataset distinguishes Microsoft's agent detections in the public record.
- Agent 365 reached general availability in May 2026 with a partner ecosystem and vendor-displayed testimonials but no publicly named paying reference customer, so demand for the paid line is so far unproven in independent sources.
- Parts of the Defender and Purview security layer, runtime blocking, and the cross-cloud registry sync remain in public preview, so the secure pillar a buyer pays for is not yet fully generally available.
- If rival clouds bundle equivalent agent governance natively or buyers standardize on a multi-cloud-neutral control plane within three to five years, Agent 365's Microsoft-bounded reach could cap its share of the emerging category.

### Problem & Market

Enterprises are deploying AI agents faster than their security teams can track them, and Microsoft Agent 365 names that gap as agent sprawl. The pitch is that an organization should manage agents the way it manages employees, using the identity, security, and compliance systems it already runs, rather than standing up a separate stack for a population of software actors that can be created and discarded by the thousand.

The buyer is the enterprise IT and security team that owns identity and access. Independent analysis marks the need as real and distinct: the non-human identity research group NHIMG frames the agents Agent 365 governs as a class of non-human identity with their own credentials, lifecycle, and operational blast radius, the same problem security teams already face with machine and service accounts.

The problem is felt beyond any single vendor. Microsoft cites a sponsored IDC projection of 1.3 billion agents by 2028, Cloud Wars described agent sprawl as a major focus of Microsoft Ignite 2025, and a cluster of specialist vendors now sells agent and non-human identity governance, evidence that buyers recognize the pain without Microsoft having to argue it. \[[s10](#profile-analysis-sources), [s9](#profile-analysis-sources), [s1](#profile-analysis-sources)\]

### Product Capabilities

Agent 365 is a control plane that sits on Microsoft's existing security products rather than a new detection engine. Microsoft groups its capabilities as registry, access control, visualization, interoperability, and security: a registry inventories every agent including ones IT registers and shadow agents, access control limits each agent to the resources it needs, and the visualization layer maps how agents connect to people and data.

Identity is the foundation, delivered through Entra Agent ID. Independent licensing analysis from SAMexpert describes two authentication flows, an on-behalf-of flow in which an agent acts with a user's delegated permissions and an agent-identity flow in which it authenticates with its own credentials, with conditional access and risk-based blocking then applied to the agent identity and Defender and Purview adding threat detection and data controls.

At its May 2026 general availability Microsoft reached beyond its own estate. VentureBeat reported registry sync, in public preview, that connects to AWS Bedrock and Google Gemini Enterprise so admins can discover and inventory agents built on rival clouds, while the lifecycle controls over those outside agents are described as basic and the deeper Defender context mapping is dated to June 2026. \[[s4](#profile-analysis-sources), [s11](#profile-analysis-sources), [s5](#profile-analysis-sources)\]

### Competitive Positioning

Agent 365 competes from a position no standalone vendor holds: Microsoft owns the directory enterprises already use for their workforce. Where specialist vendors such as Aembit, Natoma, and Saviynt connect to identity systems to govern agents, Microsoft issues agent identities inside Entra itself, so adopting agent governance can be an extension of the identity platform a customer already runs rather than a separate integration. AI Business singled out the identity system Microsoft already owns as the company's central advantage in the contest.

The other platform owners hold the same ground on their own clouds: the cited pages describe AWS Bedrock and Google Gemini Enterprise as the agent platforms Agent 365 syncs with rather than governs natively, and Okta is extending its identity service to authenticate agents, so the contest among the large identity and cloud vendors turns on which platform a customer is already committed to as much as on agent features.

The structural advantage has a boundary competitors press on. The non-human identity research group NHIMG argues that enterprise agents span Azure, AWS, GCP, SaaS, and CI/CD systems, so a control plane bounded to the Microsoft ecosystem governs only part of the risk surface, and warns the pattern could repeat the fragmented control that secrets management produced. The independent specialists exist as the cross-environment alternative. \[[s7](#profile-analysis-sources), [s10](#profile-analysis-sources), [s4](#profile-analysis-sources)\]

### Go-to-Market & Traction

Distribution comes from the platform rather than from demand Agent 365 earned on its own, and Microsoft built it into the licensing. Every Microsoft Cloud customer receives foundational capabilities at no cost, including agent identity, inventory, and basic insights, a built-in distribution path across eligible Microsoft Cloud customers, though adoption of Agent 365 is not separately evidenced. That inherited distribution is a structural advantage no standalone vendor can match, but it is platform context rather than proof of demand for the paid line.

The paid premium tier is where Microsoft must show demand. Sold at $15 per user per month or bundled into Microsoft 365 E7, and requiring a qualifying enterprise base license, it adds advanced analytics, governance policies, security posture management, and threat detection.

Named demand specific to the line is thin so far. Independent coverage from WinBuzzer names a partner ecosystem of agent builders including Adobe, SAP, Zendesk, and Manus, and VentureBeat documents a broader partner ecosystem, a verifiable partnership motion. The product page displays testimonials from KPMG and Genspark alongside Microsoft's own Microsoft Digital, endorsements rather than named paying deployments, and the public record names no paying reference customer for the premium tier as of July 2026, so traction for the paid product is unproven in independent sources. \[[s11](#profile-analysis-sources), [s6](#profile-analysis-sources), [s5](#profile-analysis-sources), [s3](#profile-analysis-sources)\]

### Team & Credibility

Agent 365 is built by Microsoft on the Entra identity organization, whose standing as an enterprise identity provider is established. Extending the directory, conditional access, and identity governance to a new class of non-human identities is engineering continuous with the systems Microsoft already operates at scale for human users.

The capability depth shows engineering rather than positioning. Federated credentials for agents, two distinct authentication flows, risk-based blocking of compromised agents, and lifecycle governance with time-limited access packages are specific, documented mechanisms aimed at how agents actually behave, not generic identity features relabeled.

What the public record does not provide is a named research or product leader for this line specifically. Nirav Shah, Rob Lefferts, and Jason Roszak announced the general-availability release on the Microsoft Security Blog, but credibility comes from Microsoft's identity and security organization and a shipping record from the November 2025 announcement to May 2026 general availability rather than an identifiable founding team for Agent 365. \[[s5](#profile-analysis-sources), [s4](#profile-analysis-sources), [s2](#profile-analysis-sources)\]

### Trust Readiness

Agent 365 reached general availability for commercial customers on May 1, 2026, roughly six months after its announcement, so the core control plane is production-ready. Parts of the security layer, including some Defender and Purview agent capabilities, runtime blocking, and the cross-cloud registry sync, remain in public preview, so the full secure pillar a buyer pays for is still arriving.

Operational fit favors the existing Microsoft customer. The service runs inside the Microsoft 365 admin center and the Entra, Defender, and Purview consoles security teams already use, and it inherits the Azure compliance and data-control posture enterprise procurement has already reviewed, which lowers the diligence cost of adoption.

The open trust question is independent verification of how well the controls work. Microsoft documents the capabilities, but the public record offers no third-party benchmark of agent threat detection or governance against the specialist alternatives, so a buyer is trusting Microsoft's own assurances and the maturity of a layer only months into general availability. \[[s2](#profile-analysis-sources), [s11](#profile-analysis-sources), [s10](#profile-analysis-sources)\]

### Competitors

| Company | Relationship | Note |
|---|---|---|
| Aembit | competes with | A non-human identity and access broker that issues and governs credentials for workloads and AI agents. |
| Natoma | competes with | An identity and access platform for AI agents and non-human identities, including an MCP gateway. |
| Saviynt | competes with | An enterprise identity governance platform extending lifecycle and access controls to AI agent identities. |
| 1Password | competes with | 1Password Unified Access discovers AI agents and credentials and governs the secrets that agent and machine identities use. |
| Amazon Web Services | competes with | AWS Bedrock AgentCore provides agent identity and runtime governance native to the rival cloud platform. |
| Okta | competes with | Extending its identity platform to authenticate and authorize AI agents alongside human users. |

## Strategy Deep Dive

A closer look at this line's product strategy, measuring how [defensible](https://zeltser.com/scoring-security-product-strategy) it is against market forces and examining the [eight areas](https://zeltser.com/security-product-creation-framework) behind it.

### Defensibility

**Exposed (10/21)**

Band guidance: pivot urgently. Analyzed 2026-07-05. Scope: Microsoft Agent 365.

Agent 365's paid capabilities, access control, and monitoring are reproducible by identity incumbents and startups, and the public record shows no proprietary dataset behind its agent detections. The hardest part for a rival to match is inherited, not built by the line: each agent becomes an identity in the Entra directory Microsoft already runs, so Agent 365 is defensible inside Microsoft's own environment and thin outside it. That placement is a head start, not a durable lead. Lock-in stays light: Microsoft's free tier includes the agent identities, so a departing customer drops only the advanced governance and keeps the inventory. Agent 365 governs the agents registered in that Entra directory, while it has bounded control over the AWS and Google agents an enterprise runs.

| Dimension | Score | Rationale |
|---|---|---|
| Value Delivery | 1/3 | Agent 365 delivers software the customer configures and runs, a governance and identity layer licensed per user with an agent inventory, access policies, risk scoring, and monitoring, the software-product level rather than a managed service that accepts accountability for the outcome. \[[s11](#deep-dive-sources), [s3](#deep-dive-sources)\] |
| Switching Cost | 1/3 | The foundational lock, the agent identities themselves, is in the free Entra tier, so leaving the paid line costs only the advanced governance and posture plus re-tooling the policies a customer configured, with the identities and inventory retained. That is less embedded than the inline credential brokers anchored at 2, and the line is only months old, so it anchors at 1. \[[s11](#deep-dive-sources), [s4](#deep-dive-sources)\] |
| Compliance Moat | 1/3 | Agent 365 carries no agent-governance-specific certification or regulatory mandate, and the Microsoft and Azure attestations it sits under ease procurement familiarity but block nothing a rival could not also clear, so it holds at the same-asset anchor. \[[s2](#deep-dive-sources), [s11](#deep-dive-sources)\] |
| Problem Complexity | 2/3 | Issuing identities to agents, authenticating them with federated credentials, applying conditional access, and discovering and inventorying agents across clouds is real identity and control-plane engineering, but it largely extends Microsoft's existing Entra, Defender, and Purview machinery rather than a uniquely hard technique a well-funded rival could not build. \[[s4](#deep-dive-sources), [s5](#deep-dive-sources)\] |
| Buyer Profile | 2/3 | The line addresses enterprise identity and security teams accountable for governing an agent fleet, the same sophisticated buyer the agent-identity peers target, but no named line customer establishes that buyer in the record, so it anchors with those peers rather than above them. The qualifying Microsoft 365 base license is inherited distribution context, not line-specific buyer pull. \[[s11](#deep-dive-sources), [s3](#deep-dive-sources)\] |
| Layer | 2/3 | Agent 365 is a governance and admin control plane layered over Entra, Defender, and Purview: it issues agent identities and assigns conditional-access and lifecycle policy, but the inline enforcement runs in those underlying planes rather than in Agent 365 itself, and the agent-specific runtime blocking and network controls are still in preview. That places it shallower than the inline credential brokers it competes with, so it anchors at 2. \[[s4](#deep-dive-sources), [s5](#deep-dive-sources)\] |
| Proprietary Data, Content, or IP | 1/3 | The public record shows no proprietary attack corpus or unique dataset behind the line, and its detections draw on Microsoft's own models and signals rather than a named non-public corpus, so a well-funded rival could rebuild them. \[[s10](#deep-dive-sources), [s5](#deep-dive-sources)\] |

### Strategic Market Segmentation

Microsoft Agent 365 targets the enterprise IT and security team accountable for the agents already running in the organization, and the entry point is the Microsoft 365 admin center rather than a separate buying motion. The buyer is whoever must inventory, identify, and control an agent fleet that grew without oversight.

The paying segment is gated by Microsoft commitment. Independent licensing analysis from SAMexpert records that the premium line requires a qualifying base license, Microsoft 365 E5, Microsoft Defender + Purview Suite Frontline Worker (FLW), or Microsoft 365 Business Premium, so the natural customer already runs Entra, Defender, and Purview and wants to add agent governance on top rather than adopt a new platform.

A free foundational tier widens the top of the funnel. Every Microsoft Cloud customer gets agent identity, inventory, and basic insights at no cost, so the potential funnel is the Microsoft Cloud customers eligible for the foundational tier, while the paying segment narrows to organizations that need the advanced analytics, security posture, and threat detection in the paid tier. \[[s11](#deep-dive-sources), [s2](#deep-dive-sources)\]

### Product Capabilities & AI Advantages

Microsoft Agent 365 is a control plane rather than a tool to build or run agents. Microsoft groups the surface as a registry that inventories the fleet, Entra Agent ID that gives each agent an identity under conditional access, and the extension of Defender threat protection and Purview data controls to agent activity.

The competitive edge Microsoft emphasizes is reach across platforms. VentureBeat reported that the general-availability release added registry sync, in public preview, that connects to AWS Bedrock and Google Gemini Enterprise so the inventory reaches those external builder platforms, and the control plane governs agents built in Copilot Studio, Foundry, open-source frameworks, and partner tools.

The advantage is integration rather than a uniquely deep model. The value comes from treating agents as first-class identities inside the directory and security stack a customer already operates, and the public record shows no proprietary dataset behind the line, so the edge is the footprint and native wiring rather than detection technology a rival could not build. \[[s2](#deep-dive-sources), [s5](#deep-dive-sources), [s10](#deep-dive-sources), [s1](#deep-dive-sources), [s3](#deep-dive-sources), [s11](#deep-dive-sources)\]

### Sales Engagement & Go-to-Market

Go-to-market is platform-led. Agent 365 is licensed at $15.00 per user per month, paid yearly with an annual commitment, or bundled into Microsoft 365 E7 at $99.00 per user per month, paid yearly, so adoption can be a license added to a Microsoft estate rather than a separate platform purchase, which may reduce procurement friction for an account already standardized on Microsoft. That is inherited Microsoft distribution rather than proof of line traction.

The clearest distribution-adjacent signal is partner ecosystem breadth. Independent coverage from WinBuzzer names agent builders including Adobe, SAP, Zendesk, and Manus plugging into Agent 365 management, and VentureBeat documents a broader partner and platform ecosystem, a verifiable partner motion that supplies breadth before customer references exist rather than proof of paid demand.

The honest gap is demand proof. The line reached general availability on May 1, 2026, and the cited record does not show a named paying reference deployment, so the motion rests on pricing, partners, and analyst attention rather than confirmed production adoption at scale. \[[s11](#deep-dive-sources), [s3](#deep-dive-sources), [s6](#deep-dive-sources), [s5](#deep-dive-sources)\]

### Pricing Model

Pricing is published and per-user. Independent licensing analysis from SAMexpert and the Microsoft product page record a standalone price of $15.00 per user per month, paid yearly with an annual commitment, with the line also bundled into the Microsoft 365 E7 suite at $99.00 per user per month, paid yearly, and one license covering all of a person's agents rather than a charge per agent.

The unit signals what Microsoft believes the buyer pays for. Charging per user who manages or is served by an agent prices the accountable human rather than the agent count, which keeps the bill predictable as an employee's agent use grows and frames governance as an extension of per-seat enterprise licensing.

The structure assumes the Microsoft estate and bills consumption separately. A qualifying base license is required underneath the per-user fee, and building and running agents through Copilot Studio or Microsoft Foundry generates separate consumption charges, so a buyer must weigh the full stack rather than the headline seat price in isolation. \[[s11](#deep-dive-sources), [s3](#deep-dive-sources), [s5](#deep-dive-sources)\]

### Product Delivery & Operations

The line is delivered as a managed cloud control plane inside the Microsoft 365 and security stack, with the registry, identity assignment, and policy surfaced in admin tooling and enforcement carried by Entra, Defender, and Purview, so the customer runs no infrastructure of its own.

Operational maturity is staged. Microsoft and independent coverage mark parts of the agent security surface, including some Defender and Purview capabilities, runtime blocking and local-agent controls, and the cross-cloud registry sync, as public preview weeks after the May 2026 general availability, so an operator gets a production registry and identity layer with parts of the security surface still arriving.

The operational dependency is the Microsoft estate itself. Because enforcement runs through Entra, Defender, and Purview, the line works best where those are already deployed and tuned, and its value drops for an organization that does not run Microsoft's identity and security planes. \[[s2](#deep-dive-sources), [s3](#deep-dive-sources), [s11](#deep-dive-sources)\]

### Earning Customers' Trust

The trust story leans on Microsoft's identity and security standing. Agent 365 extends Entra, Defender, and Purview, the planes enterprise procurement already reviews for human users, to agents, so the diligence cost is lower for a customer that already trusts those controls.

The capabilities map to the agent risks an enterprise must document. An agent gets an identity under conditional access, risk-based blocking, and data controls, so the actions of an autonomous agent become traceable and governable the way a user's are.

The unresolved trust questions are maturity and independent proof. Parts of the security surface are still in preview, and the public record offers no third-party benchmark of how well the agent controls detect or block real misuse, so a buyer relying on the secure pillar is trusting Microsoft's own assurances and a layer only months into general availability. \[[s2](#deep-dive-sources), [s10](#deep-dive-sources), [s11](#deep-dive-sources)\]

### Platform Strategy & Ecosystem Positioning

Agent 365 is an extension of the Microsoft platform rather than a platform of its own, and its value compounds with how much of an organization's identity, endpoint, and data control already runs on Microsoft. It governs agents using the planes the customer already operates.

Outward, the platform reaches rival ecosystems deliberately. Registry sync pulls agents from AWS Bedrock and Google Gemini Enterprise into the Agent 365 inventory, positioning Microsoft tooling above platforms that ship their own agents, and a partner ecosystem of agent builders plugs into the same management layer.

The ecosystem question for a buyer is who controls the governance layer and how far it reaches. The non-human identity research group NHIMG argues that agents span many clouds and runtimes, so a buyer that concentrates governance on Microsoft still needs another control for agents outside the estate, and the cross-cloud sync that narrows that gap discovers and inventories outside agents with basic lifecycle actions, short of the full controls applied to Microsoft-native agents. \[[s5](#deep-dive-sources), [s10](#deep-dive-sources), [s8](#deep-dive-sources)\]

### Team & Execution Capability

The line is built by the Microsoft identity and security organizations behind Entra, Defender, and Purview, and its credibility comes from extending those established planes to agents rather than from a standalone founding team.

The shipping record is fast and dated. Microsoft moved Agent 365 from its November 2025 announcement to general availability on May 1, 2026, and added multicloud registry sync and local agent discovery at the launch, with Nirav Shah, Rob Lefferts, and Jason Roszak announcing the general-availability release publicly.

What the record does not provide is a deployment history for this specific line, since it is new, so credibility comes from Microsoft's identity and security pedigree and the early release pace rather than a proven agent-governance track record. \[[s5](#deep-dive-sources), [s2](#deep-dive-sources), [s4](#deep-dive-sources)\]

## Sources

### Profile Analysis Sources

Cited from the Market Readiness section.

| Id | Source | Tier | Accessed |
|---|---|---|---|
| s1 | [Microsoft 365 Blog: Microsoft Agent 365, the control plane for AI agents (Nov 18 2025)](https://www.microsoft.com/en-us/microsoft-365/blog/2025/11/18/microsoft-agent-365-the-control-plane-for-ai-agents/) “They automate tasks, collaborate with people, and accelerate productivity. In fact, IDC predicts there will be 1.3 billion agents by 2028.” | official | 2026-06-29 |
| s2 | [Microsoft Security Blog: Microsoft Agent 365 now generally available (May 1 2026)](https://www.microsoft.com/en-us/security/blog/2026/05/01/microsoft-agent-365-now-generally-available-expands-capabilities-and-integrations/) “Microsoft Agent 365 helps you take control of agent sprawl as your control plane to observe, govern, and secure agents and their interactions, including agents built with Microsoft AI and agents from our ecosystem partners.” | official | 2026-07-02 |
| s3 | [Microsoft Agent 365 product page](https://www.microsoft.com/en-us/microsoft-agent-365) “Get the confidence to move from agentic AI experimentation to enterprise-scale operations by giving your IT and security teams a control plane to observe, govern, and secure every agent across your organization.” | official | 2026-07-02 |
| s4 | [Microsoft Ignite 2025 Book of News: Agent 365 and Entra Agent ID](https://news.microsoft.com/ignite-2025-book-of-news/) “Registry: Get the complete view of all agents in your organization, including agents with agent ID, agents you register yourself and shadow agents.” | official | 2026-06-29 |
| s5 | [VentureBeat: Microsoft takes Agent 365 out of preview as shadow AI becomes an enterprise threat (May 4 2026)](https://venturebeat.com/technology/microsoft-takes-agent-365-out-of-preview-as-shadow-ai-becomes-an-enterprise-threat) “A new public preview of Agent 365 registry sync enables IT teams to connect with AWS Bedrock and Google Cloud (specifically, Google Gemini Enterprise Agent Platform, formerly Google Vertex AI).” | press | 2026-06-29 |
| s6 | [WinBuzzer: Microsoft Agent 365 hits general availability with local AI agent controls (May 2 2026)](https://winbuzzer.com/2026/05/02/microsoft-agent-365-general-availability-local-ai-agents-xcxwbn/) “Adobe, SAP, Zendesk, and Manus are the named partners building agents that plug into Agent 365's management layer” | press | 2026-06-29 |
| s7 | [AI Business: With Agent 365, Microsoft pumps agentic AI into its systems](https://aibusiness.com/agentic-ai/agent-365-microsoft-pumps-agentic-systems) “one particular strength Microsoft is using to its advantage is the identity system it already owns, which enables the vendor to identify any user within the Microsoft ecosystem.” | press | 2026-06-29 |
| s8 | [Futurum Group: Microsoft Agent 365 turns shadow AI into a governed asset class (May 8 2026)](https://futurumgroup.com/insights/microsoft-agent-365-turns-shadow-ai-into-a-governed-asset-class/) “The release signals Microsoft's intent to own the governance layer for enterprise agentic AI, extending identity, endpoint, and network controls to agents regardless of where they originate or operate.” | research | 2026-06-29 |
| s9 | [Cloud Wars: With Agent 365 and security tools, Microsoft equips customers to govern AI agent estates (Nov 19 2025)](https://cloudwars.com/ai/with-agent-365-and-security-tools-microsoft-equips-customers-to-govern-ai-agent-estates/) “Management and security of customers' rapidly expanding fleets of AI agents were a major focus of day one of the annual Microsoft Ignite conference on Tuesday.” | press | 2026-06-29 |
| s10 | [NHI Management Group: Microsoft Agent 365 raises the bar on AI agent identity governance](https://nhimg.org/articles/microsoft-agent-365-raises-the-bar-on-ai-agent-identity-governance/) “Microsoft Agent 365 adds identity primitives such as agent IDs, lifecycle rules, policy templates, risk-based access and auditability, but the control plane remains bounded by the Microsoft ecosystem while enterprise agents run across Azure, AWS, GCP, SaaS and CI/CD systems.” | research | 2026-06-29 |
| s11 | [SAMexpert: Agent 365 licensing, what it covers and costs](https://samexpert.com/agent-365/) “Agent 365 is available as a standalone product at $15 per user per month, generally available since 1 May 2026... describes two authentication flows. The On-Behalf-Of (OBO) flow lets an agent receive a user's delegated token and act with that user's permissions.” | other | 2026-07-02 |

### Deep-Dive Sources

Cited from the Strategy Deep Dive section.

| Id | Source | Tier | Accessed |
|---|---|---|---|
| s1 | [Microsoft 365 Blog: Microsoft Agent 365, the control plane for AI agents (Nov 18 2025)](https://www.microsoft.com/en-us/microsoft-365/blog/2025/11/18/microsoft-agent-365-the-control-plane-for-ai-agents/) “They automate tasks, collaborate with people, and accelerate productivity. In fact, IDC predicts there will be 1.3 billion agents by 2028.” | official | 2026-06-29 |
| s2 | [Microsoft Security Blog: Microsoft Agent 365 now generally available (May 1 2026)](https://www.microsoft.com/en-us/security/blog/2026/05/01/microsoft-agent-365-now-generally-available-expands-capabilities-and-integrations/) “Microsoft Agent 365 helps you take control of agent sprawl as your control plane to observe, govern, and secure agents and their interactions, including agents built with Microsoft AI and agents from our ecosystem partners.” | official | 2026-07-02 |
| s3 | [Microsoft Agent 365 product page](https://www.microsoft.com/en-us/microsoft-agent-365) “Agent 365 $15.00 user/month, paid yearly (Annual commitment)... Microsoft 365 E7 $99.00 user/month, paid yearly (Annual commitment)” | official | 2026-07-02 |
| s4 | [Microsoft Ignite 2025 Book of News: Agent 365 and Entra Agent ID](https://news.microsoft.com/ignite-2025-book-of-news/) “Registry: Get the complete view of all agents in your organization, including agents with agent ID, agents you register yourself and shadow agents.” | official | 2026-06-29 |
| s5 | [VentureBeat: Microsoft takes Agent 365 out of preview as shadow AI becomes an enterprise threat (May 4 2026)](https://venturebeat.com/technology/microsoft-takes-agent-365-out-of-preview-as-shadow-ai-becomes-an-enterprise-threat) “A new public preview of Agent 365 registry sync enables IT teams to connect with AWS Bedrock and Google Cloud (specifically, Google Gemini Enterprise Agent Platform, formerly Google Vertex AI).” | press | 2026-06-29 |
| s6 | [WinBuzzer: Microsoft Agent 365 hits general availability with local AI agent controls (May 2 2026)](https://winbuzzer.com/2026/05/02/microsoft-agent-365-general-availability-local-ai-agents-xcxwbn/) “Adobe, SAP, Zendesk, and Manus are the named partners building agents that plug into Agent 365's management layer” | press | 2026-06-29 |
| s7 | [AI Business: With Agent 365, Microsoft pumps agentic AI into its systems](https://aibusiness.com/agentic-ai/agent-365-microsoft-pumps-agentic-systems) “one particular strength Microsoft is using to its advantage is the identity system it already owns, which enables the vendor to identify any user within the Microsoft ecosystem.” | press | 2026-06-29 |
| s8 | [Futurum Group: Microsoft Agent 365 turns shadow AI into a governed asset class (May 8 2026)](https://futurumgroup.com/insights/microsoft-agent-365-turns-shadow-ai-into-a-governed-asset-class/) “The release signals Microsoft's intent to own the governance layer for enterprise agentic AI, extending identity, endpoint, and network controls to agents regardless of where they originate or operate.” | research | 2026-06-29 |
| s9 | [Cloud Wars: With Agent 365 and security tools, Microsoft equips customers to govern AI agent estates (Nov 19 2025)](https://cloudwars.com/ai/with-agent-365-and-security-tools-microsoft-equips-customers-to-govern-ai-agent-estates/) “Management and security of customers' rapidly expanding fleets of AI agents were a major focus of day one of the annual Microsoft Ignite conference on Tuesday.” | press | 2026-06-29 |
| s10 | [NHI Management Group: Microsoft Agent 365 raises the bar on AI agent identity governance](https://nhimg.org/articles/microsoft-agent-365-raises-the-bar-on-ai-agent-identity-governance/) “Microsoft Agent 365 adds identity primitives such as agent IDs, lifecycle rules, policy templates, risk-based access and auditability, but the control plane remains bounded by the Microsoft ecosystem while enterprise agents run across Azure, AWS, GCP, SaaS and CI/CD systems.” | research | 2026-06-29 |
| s11 | [SAMexpert: Agent 365 licensing, what it covers and costs](https://samexpert.com/agent-365/) “Agent 365 is available as a standalone product at $15 per user per month, generally available since 1 May 2026... require Microsoft 365 E5, Microsoft Defender + Purview Suite FLW, or M365 Business Premium as a prerequisite.” | other | 2026-07-02 |

## Disclaimer

This site is an experimental research aid created by Zeltser Security Corp. All its data gathering and analysis was performed autonomously without human review, and it can contain errors of fact, interpretation, and judgment that a human reviewer might catch.

The analyses are statements of opinion, not statements of fact. Machine analysis produced the scores, summaries, and matrix placements by weighing the public sources each page cites, and reasonable people can weigh the same sources differently. Where a page states a fact, it cites the public source and the date it was checked, and the statement is only as accurate as that source. Unless a profile expressly says otherwise, the analysis involves no hands-on testing and no independent validation of any company's products or services.

Nothing here is professional, security, legal, financial, investment, or purchasing advice, and nothing here is a recommendation to invest in, do business with, or avoid any company. Inclusion of a company is not an endorsement, and absence of a company is not a judgment about it. Reading this site creates no advisory or client relationship. Verify any detail you plan to act on against the vendor's current materials.

The content is provided "as is" and "as available," with all warranties disclaimed, express or implied, including merchantability, fitness for a particular purpose, accuracy, and non-infringement. No entry is warranted to be complete, current, or correct. Companies change, vendors update their claims, sources can be wrong, and automated analysis can misread them.

To the fullest extent permitted by law, the operator, Zeltser Security Corp, is not liable for any damages that arise from using this site or relying on its content, including direct, indirect, incidental, special, and consequential damages and lost profits, even if advised that such damages were possible. If you are dissatisfied with the site or disagree with these terms, your remedy is to stop using it.

Entries link to vendor pages, press coverage, and other external sites that Zeltser Security Corp does not control and is not responsible for. A link is not an affiliation with the destination or an endorsement of it. Product and company names and trademarks are the property of their owners, used here nominatively to identify the companies described. Short quotations from cited sources appear for identification and commentary.

Use, quotation, automated retrieval, and redistribution of the content are governed by the Terms of Use at cybercompanyprofiles.com/terms, which permit personal and internal business use with attribution and prohibit republication and resale.