Charlotte AI
CrowdStrikeUnited States
10
Agentic SOC analyst
- Version
- Charlotte AI
- Cost
- Pricing not published; contact CrowdStrike for custom enterprise quoting.
- Model
- Bring your own models / choice of models
Security Copilot
Microsoft · #2 most active of 8 in Security
Security-specific copilot wired into Defender, Sentinel, Intune and Entra.
100
Trust score · Verified
2 data points checked · 2026-11-03
Current version
Security Copilot
Entry cost
from $4/mo
Changes / 30d
9
The short answers · verified November 8, 2026
- What is the latest version of Security Copilot?
- The current shipped version of Security Copilot is Security Copilot, as of November 8, 2026.
- How much does Security Copilot cost?
- Security Copilot starts at $4 per month on its cheapest paid tier, as of November 8, 2026.
- What AI model does Security Copilot use?
- Security Copilot runs primarily on Specialized language model.
Source: Microsoft — www.microsoft.com · Reusable under CC BY 4.0 — cite Tomorrow
Capabilities
- Incident summarization
- KQL generation
- Agent library
- Defender integration
- Security Copilot Agents
- Phishing Triage Agent
- Conditional Access Optimization Agent
- Incident Summarization
- Response Guidance
- Natural Language Translation to KQL
- Script Reverse-Engineering
- Stakeholder Reporting
- Partner Plugins
- agentic automation
- incident triage
- vulnerability remediation
- phishing triage
- script building
- stakeholder reporting
- natural language translation
- Security Copilot agents
- Phishing triage
- Vulnerability remediation
- Alert triage
- Natural language translation for scripts
- Stakeholder reporting
- SIEM integration
- multi-agent workflows
- alert triage
- reverse-engineering scripts
- embedded skills
- promptbooks
- Multi-agent workflows
- Script translation
- Threat hunting
- AI agents
- Triage complex alerts
- Step-by-step response guidance
- phishing triage agent
- incident investigation
- script reverse-engineering
- partner-built agents
- community-built agents
- agents
- script generation
- threat hunting
- Script generation
- Reverse-engineering scripts
- Natural language queries
- Agents
- Incident Investigation
- Phishing Triage
- Alert Triage
- Vulnerability Remediation
- Microsoft Sentinel Integration
- Microsoft Defender Integration
- Microsoft Intune Integration
- Script building
- Script reverse-engineering
- Natural language translation
- Threat intelligence
- Embedded AI skills
- Promptbooks
- Incident investigation
- Script building and reverse-engineering
- remediation guidance
- natural language query translation
- Phishing triage agent
- Remediation guidance
- Natural language query translation
- Third-party integrations
- malware script translation
- plugins
- Incident investigation and remediation
- natural language queries
- incident context summaries
- AI-driven guidance
- Natural language translation to script
- Natural language KQL generation
- security-specific skills
- Conditional access optimization agent
- Custom agent builder
- Building and reverse-engineering scripts
- Natural language script translation
- Incident summary
- Step-by-step remediation guidance
- AI-powered cybersecurity
- malware analysis
- Security agents
- Incident reporting
- Script Building
- Natural Language Translation
- global threat intelligence
- script translation
- natural language query generation
- incident summarization
- Agentic automation
- Incident triage
- natural language scripts
- Incident Triaging
- Automated workflows
- Reporting
- Incident Triage
- SIEM Integration
- Partner-built agents
- Community-built agents
- Incident Summaries
- Threat Hunting
- Investigation and remediation
- Script building/reverse-engineering
- Microsoft Defender integration
- Microsoft Entra integration
- Microsoft Intune integration
- Microsoft Purview integration
- Script Building & Translation
- Integration with SIEM (Microsoft Sentinel)
- reporting
- Natural language translation to query language
- Threat hunting queries
- Incident summaries
- Embedded Agents
- Partner-built Agents
- Community-built Agents
- AI Agents
- Script Translation
- Threat intelligence integration
- Threat response guidance
- Zero trust optimization
- Natural Language to KQL
- Script building & reverse-engineering
- Remediation Guidance
- Copilot Agents
- Script Building and Reverse-Engineering
- script building/reverse-engineering
- Embedded skills
- Vulnerability remediation agent
- Alert triage agent
- Script building and reverse engineering
- Embedded agents
- Plugin and promptbook integration
- threat intelligence
- incident response
- Incident response guidance
- incident summaries
- Microsoft Security integrations
- threat analysis
- SIEM & XDR integration
- Natural language prompts
- Query generation
- Multicloud risk remediation
- threat intelligence integration
- automated workflows
- incident summary reporting
- Security Operations (SecOps)
- Malware Analysis
- Zero Trust Policy Optimization
Pricing
Security Copilot provisioned capacity
Provision compute capacity to run workloads; pricing details on dedicated pricing page
Free
Entry price over time
Geek mode
Models under the hood
- inferred
GPT-4
OpenAI
- inferred
Security Copilot specialized model
Microsoft
- inferred
Security-specific specialized language model
Microsoft
- disclosed
Specialized language model
Provider undisclosed
- inferred
Specialized language model by Microsoft
Microsoft
- disclosed
Specialized language model with security-specific capabilities
Microsoft
- disclosed
specialized language model with security-specific capabilities from Microsoft
Microsoft
- inferred
Specialized Microsoft security language model
Microsoft
- inferred
Specialized security language model
Microsoft
- inferred
specialized security-specific language model
Microsoft
Context window
—
Public API
yes
Multi-model routing
no
Shared model stack
Other tracked products running on the same foundation models — a quick read on how much of the catalog moves when one of these models changes.
- GPT-4OpenAI · 14 products
- Security Copilot specialized modelMicrosoft · 1 product
- Security-specific specialized language modelMicrosoft · 1 product
- Specialized language modelProvider undisclosed · 1 product
- Specialized language model by MicrosoftMicrosoft · 1 product
- Specialized language model with security-specific capabilitiesMicrosoft · 1 product
- specialized language model with security-specific capabilities from MicrosoftMicrosoft · 1 product
- Specialized Microsoft security language modelMicrosoft · 1 product
green disclosed · amber inferred · grey unattributed. Aliases are folded into one model; provider concentration counts only models with an established vendor.
Reported scale
Reference data. Each figure is whatever the source actually said — weekly users, downloads, revenue run-rate — with its own definition and date. These are not comparable between tools and are never used to rank anything.
No public usage figure on record for this product.
Public market scorecard
Microsoft investor relationsMicrosoft trades as NASDAQ: MSFT. Figures below are as reported for Q4 FY2026 on Jul 29, 2026; market levels are the close on Aug 6, 2026 and are a reference marker, not a live quote.
Q4 FY2026 revenue
$81B
+17% YoY
- Azure growth
- ~+34% YoY
- AI services a large share of the beat
- Microsoft 365 Copilot
- majority of Fortune 500
- company stated
- Capex
- ~$30B in the quarter
Also in Security
All SecurityTorq HyperSOC
TorqIsrael
7
Autonomous SOC fabric
- Version
- AI SOC Platform
- Cost
- Pricing not published; available via demo/quote request
- Model
- Socrates
Dropzone AI
Dropzone AIUnited States
6
Autonomous alert investigation
- Version
- Agentic SOC
- Cost
- Pricing is not publicly listed. Request a demo to get custom enterprise pricing.
- Model
- LLM
Abnormal AI
Abnormal SecurityUnited States
5
Behavioral email defense
- Version
- Attune AI
- Cost
- Pricing is not publicly disclosed. Contact sales or request a demo for custom quote.
- Model
- Attune AI
Wiz Defend
WizUnited States
5
Cloud detection and response
- Version
- Wiz Defend
- Cost
- Pricing not publicly listed. Contact Wiz for enterprise quotes or demo.
- Model
- Undisclosed
Cortex AgentiX
Palo Alto NetworksUnited States
1
Agentic security automation
- Version
- Cortex AgentiX
- Cost
- Pricing not published. Request a demo or contact sales.
- Model
- Undisclosed
Elsewhere on the same models
Products in other segments that name one of Security Copilot's models in their stack.
Khanmigo
Khan AcademyUnited States
14
AI tutor for students and teachers
- Version
- GPT-4 integration
- Cost
- Free for teachers. Paid monthly or annual subscription required for parents and learners (pricing not specified).
- Model
- GPT-4
Change history
- model
Security Copilot added specialized language model with security-specific capabilities from Microsoft to its model stack
GPT-4, Security Copilot specialized model, Security-specific specialized language model, Specialized Microsoft security language model, Specialized language model, Specialized language model by Microsoft, Specialized language model with security-specific capabilities, Specialized security language model, specialized security-specific language modelGPT-4, Security Copilot specialized model, Security-specific specialized language model, Specialized Microsoft security language model, Specialized language model, Specialized language model by Microsoft, Specialized language model with security-specific capabilities, Specialized security language model, specialized language model with security-specific capabilities from Microsoft, specialized security-specific language model
source - capability
New capabilities: Security Operations (SecOps), Malware Analysis, Zero Trust Policy Optimization
153 tracked156 tracked · +Security Operations (SecOps), Malware Analysis, Zero Trust Policy Optimization
source - capability
New capabilities: threat intelligence integration, automated workflows, incident summary reporting
150 tracked153 tracked · +threat intelligence integration, automated workflows, incident summary reporting
source - capability
New capabilities: Query generation, Multicloud risk remediation
148 tracked150 tracked · +Query generation, Multicloud risk remediation
source - capability
New capabilities: SIEM & XDR integration, Natural language prompts
146 tracked148 tracked · +SIEM & XDR integration, Natural language prompts
source - capability
- model
Security Copilot added Specialized Microsoft security language model to its model stack
GPT-4, Security Copilot specialized model, Security-specific specialized language model, Specialized language model, Specialized language model by Microsoft, Specialized language model with security-specific capabilities, Specialized security language model, specialized security-specific language modelGPT-4, Security Copilot specialized model, Security-specific specialized language model, Specialized Microsoft security language model, Specialized language model, Specialized language model by Microsoft, Specialized language model with security-specific capabilities, Specialized security language model, specialized security-specific language model
source - capability
New capabilities: Microsoft Security integrations
144 tracked145 tracked · +Microsoft Security integrations
source - capability
- capability
New capabilities: Incident response guidance
142 tracked143 tracked · +Incident response guidance
source - model
Security Copilot added Security Copilot specialized model to its model stack
GPT-4, Security-specific specialized language model, Specialized language model, Specialized language model by Microsoft, Specialized language model with security-specific capabilities, Specialized security language model, specialized security-specific language modelGPT-4, Security Copilot specialized model, Security-specific specialized language model, Specialized language model, Specialized language model by Microsoft, Specialized language model with security-specific capabilities, Specialized security language model, specialized security-specific language model
source - capability
- capability
- capability
New capabilities: Plugin and promptbook integration
139 tracked140 tracked · +Plugin and promptbook integration
source - capability
- model
Security Copilot added Specialized language model by Microsoft to its model stack
GPT-4, Security-specific specialized language model, Specialized language model, Specialized language model with security-specific capabilities, Specialized security language model, specialized security-specific language modelGPT-4, Security-specific specialized language model, Specialized language model, Specialized language model by Microsoft, Specialized language model with security-specific capabilities, Specialized security language model, specialized security-specific language model
source - capability
New capabilities: Vulnerability remediation agent, Alert triage agent, Script building and reverse engineering
135 tracked138 tracked · +Vulnerability remediation agent, Alert triage agent, Script building and reverse engineering
source - capability
- capability
New capabilities: script building/reverse-engineering
133 tracked134 tracked · +script building/reverse-engineering
source - capability
New capabilities: Script Building and Reverse-Engineering
132 tracked133 tracked · +Script Building and Reverse-Engineering
source - capability
- capability
- capability
New capabilities: Script building & reverse-engineering
129 tracked130 tracked · +Script building & reverse-engineering
source - capability
- capability
New capabilities: Threat response guidance, Zero trust optimization
126 tracked128 tracked · +Threat response guidance, Zero trust optimization
source - capability
New capabilities: Threat intelligence integration
125 tracked126 tracked · +Threat intelligence integration
source - capability
New capabilities: AI Agents, Script Translation
123 tracked125 tracked · +AI Agents, Script Translation
source - capability
New capabilities: Embedded Agents, Partner-built Agents, Community-built Agents
120 tracked123 tracked · +Embedded Agents, Partner-built Agents, Community-built Agents
source - capability
- capability
New capabilities: Natural language translation to query language, Threat hunting queries
117 tracked119 tracked · +Natural language translation to query language, Threat hunting queries
source - capability
- capability
New capabilities: Script Building & Translation, Integration with SIEM (Microsoft Sentinel)
114 tracked116 tracked · +Script Building & Translation, Integration with SIEM (Microsoft Sentinel)
source - capability
New capabilities: Investigation and remediation, Script building/reverse-engineering, Microsoft Defender integration
108 tracked114 tracked · +Investigation and remediation, Script building/reverse-engineering, Microsoft Defender integration, Microsoft Entra integration, Microsoft Intune integration, Microsoft Purview integration
source - model
Security Copilot added Security-specific specialized language model to its model stack
GPT-4, Specialized language model, Specialized language model with security-specific capabilities, Specialized security language model, specialized security-specific language modelGPT-4, Security-specific specialized language model, Specialized language model, Specialized language model with security-specific capabilities, Specialized security language model, specialized security-specific language model
source - capability
New capabilities: Incident Summaries, Threat Hunting
106 tracked108 tracked · +Incident Summaries, Threat Hunting
source - model
Security Copilot added GPT-4 to its model stack
Specialized language model, Specialized language model with security-specific capabilities, Specialized security language model, specialized security-specific language modelGPT-4, Specialized language model, Specialized language model with security-specific capabilities, Specialized security language model, specialized security-specific language model
source - capability
New capabilities: Incident Triage, SIEM Integration, Partner-built agents
102 tracked106 tracked · +Incident Triage, SIEM Integration, Partner-built agents, Community-built agents
source - capability
- capability
New capabilities: Incident Triaging, Automated workflows
99 tracked101 tracked · +Incident Triaging, Automated workflows
source - capability
Security Copilot compared
Straight head-to-head pages against the busiest products in Security.
How to cite this page
Free to cite and reuse under CC BY 4.0. Permalink: https://tomorrow.aliensquad.ai/tools/security-copilot
APA
Tomorrow. (2026). Security Copilot — version, pricing and model stack [Data set entry]. AlienSquad. Retrieved 2026-11-08, from https://tomorrow.aliensquad.ai/tools/security-copilot
BibTeX
@misc{tomorrow-tools-security-copilot,
author = {{Tomorrow}},
title = {Security Copilot — version, pricing and model stack},
year = {2026},
publisher = {AlienSquad},
howpublished = {\url{https://tomorrow.aliensquad.ai/tools/security-copilot}},
note = {Accessed: 2026-11-08}
}