Microsoft introduces M365 E7 and Project Perception to secure AI agents

Microsoft Security published first-hand research on October 19, 2026, outlining new tools to address the security challenges posed by autonomous AI agents. The company states that these agents represent a new class of insiders, necessitating security measures that can keep pace with their rapid actions and decision-making capabilities.

The announcement highlights Microsoft 365 E7 and Project Perception as primary mechanisms for managing this emerging threat landscape. According to the Microsoft Security Blog, these capabilities are designed to help organizations contain agent risk while adapting their protection strategies continuously. The firm emphasizes that traditional security models may not be sufficient for the speed and autonomy of modern AI agents.

Context and Background

Microsoft positions AI agents as the newest insiders within an organization's digital environment. This classification implies that these automated systems have access levels and operational impacts similar to human employees, but with significantly higher velocity. The company argues that security frameworks must evolve to match this speed, ensuring that protective measures do not lag behind agent activities.

The research suggests that the ability to adapt protection continuously is critical. As AI agents become more prevalent in enterprise workflows, the static nature of legacy security controls becomes a liability. Microsoft’s approach focuses on dynamic containment and real-time adaptation, leveraging the advanced features found in its latest enterprise offerings.

Who Is Affected

Organizations utilizing Microsoft 365 E7 are the primary audience for these new security capabilities. Enterprises that have adopted or are planning to deploy autonomous AI agents within their Microsoft 365 environments will find these tools relevant. The guidance applies to security professionals responsible for monitoring and controlling automated processes that interact with sensitive data or systems.

Project Perception is specifically targeted at security teams that need to monitor and adjust defenses in real time. This toolset is intended for environments where AI agents operate with significant autonomy, potentially accessing data or executing tasks without direct human intervention at every step. Organizations that rely on these agents for operational efficiency must now consider the associated insider risks.

What should you do?

Security teams should review the capabilities of Microsoft 365 E7 to determine how they align with current agent deployment strategies. Organizations should evaluate their existing monitoring tools to see if they can keep pace with the speed of autonomous agents. Implementing Project Perception may help teams adapt their protection methods continuously, ensuring that security controls remain effective against fast-moving automated threats.

What to do and how to stay safe: Microsoft

• Review the specific security features available in Microsoft 365 E7 to understand how they address agent-related risks.
• Assess current monitoring capabilities to ensure they can detect and respond to actions taken by autonomous AI agents in real time.
• Evaluate the integration of Project Perception into your security operations to enable continuous adaptation of protection strategies.
• Align your insider threat policies with the new reality of AI agents acting as high-speed, autonomous insiders within your network.

Step-by-step guide: Mobile Device Security: How to Protect Data Beyond Passwords

General security guidance from the Threat Times newsroom. It is not confirmed advice from the organisations named in this story.

Frequently asked questions

What is Microsoft 365 E7?

Microsoft 365 E7 is a product tier that includes new capabilities designed to help organizations contain risks associated with autonomous AI agents.

What is Project Perception?

Project Perception is a tool that helps security teams adapt their protection continuously to address the evolving behaviors of AI agents.

Why does Microsoft call agents "newest insiders"?

Microsoft describes AI agents as the newest insiders because they operate within organizational systems with access and autonomy that resemble human employees, requiring security to move at their speed.