Microsoft (MSFT) has officially launched Microsoft Agent 365, an integrated management platform designed to support the safe operation of AI agents and strengthen security and governance.
Microsoft announced Monday the official release of Agent 365. As AI agents rapidly proliferate across apps, endpoints, and the cloud, more cases are emerging in which they operate outside the control of enterprise security teams. Microsoft introduced the Agent 365 service on the view that risks such as excessive data sharing and privilege abuse can arise when agents autonomously invoke tools or interact with other agents.
Agent 365 is a control platform that enables organizations to observe, manage, and protect agents from Microsoft and its ecosystem partners in an integrated manner while maintaining their existing management and security workflows. "Delegated access," which operates on behalf of users, and "self access," which operates in the background, have been officially released, while the feature allowing agents to participate in team workflows is offered as a public preview.
In particular, shadow AI and agent detection capabilities have been strengthened. Through Microsoft Defender and Intune, agents and shadow AI operating in local and cloud environments can be identified. Starting with OpenClaw running on Windows devices, the detection and management scope will be expanded to GitHub Copilot CLI and Claude Code, enhancing detection and management capabilities for local agents.
The agent risk assessment framework has also been strengthened. By visualizing the relationships among devices connected to agents, MCP servers, related IDs, and accessible cloud resources, the platform allows security teams to assess infrastructure exposure and potential impact. When an agent exhibits malicious behavior patterns, such as attempts to access or exfiltrate sensitive data, Defender blocks them in real time and generates alerts containing incident context. This feature will be provided as a public preview of Intune and Defender in June.
Support for multi-cloud environments is also being expanded. Organizations using Agent 365 can synchronize registries with AWS Bedrock and Google Cloud to automatically detect agents and manage their lifecycles across multiple platforms. Ecosystem partner agents such as Genspark, Gensai, Egnyte, and Zendesk, as well as agent factory-based agents such as Kasisto, Core AI, and n8n, can be managed through Agent 365 without separate integration work.
Microsoft will partner with global firms including Accenture, Bechtel, Capgemini, Insight, KPMG, Protiviti, and Slalom to provide governance workshops and consulting services for enterprise customers. These services will cover organizing agent inventories, establishing ownership, applying the principle of least privilege, and addressing data protection and compliance.
Microsoft Agent 365 is currently included in the Microsoft 365 E7 license and, if needed, is available as a standalone license for $15 (about 21,700 won) per user per month.
