Microsoft Security Copilot pricing
Microsoft Security Copilot empowers security and IT teams to protect organizations at the speed and scale of AI.
OVERVIEW
Protect your organization at the speed and scale of AI
Explore flexible purchase options
Provision capacity in security compute units (SCUs) to power Security Copilot workloads. Scale confidently with uninterrupted coverage during high-demand periods.
Use provisioned SCUs for routine workloads
Allocate provisioned SCUs for routine workloads (a minimum of 1 provisioned SCU is required).
Scale easily with overage SCUs
Scale easily to meet unexpected demand—only paying for what you use, up to your selected overage limit.
Easily estimate your SCU usage
Estimate SCU needs using the capacity calculator (Azure account required).
Monitor your consumption with the usage dashboard
Get granular usage insights with the in-product usage dashboard.
ANNOUNCEMENT
AI agents built into your workflow
Use Security Copilot agents across Microsoft Defender, Entra, Intune, and Purview– at no added cost with Microsoft 365 E5.
PRICING TABLE
Explore pricing options
Prices are estimates only and are not intended as actual price quotes. Actual pricing may vary depending on the type of agreement entered with Microsoft, date of purchase, the currency exchange rate and taxes which may be applicable.1
GET STARTED
Protect everything
Make your future more secure. Explore your security options today.
PRICING CALCULATOR
Azure Pricing calculator
Calculate your estimated hourly or monthly costs for using Azure. Log in to save cost estimates and view your Azure agreement pricing.
RESOURCES
Additional resources
Microsoft Security Copilot
Discover Microsoft Security Copilot features and capabilities.
Download our service level agreement
Get to know the latest service level agreement for Microsoft Online Services.
Documentation
Dive into technical tutorials, videos, and more resources.
FAQ
Frequently asked questions
- An SCU is a unit measure of the compute power to run Security Copilot workloads within the standalone and embedded experiences.
- At Ignite 2025, Microsoft announced that Security Copilot agents will be directly built into the flow of work for security teams, available in Microsoft Defender, Entra, Intune and Purview.
To make the agents easily accessible and help security teams get started faster, Security Copilot will be available to all Microsoft 365 E5 customers.
Microsoft 365 E5 customers already using Security Copilot as of November 18, 2025, can access this benefit now. All other Microsoft 365 E5 customers will be activated through a phased roll-out in the upcoming months. Customers will receive advanced notice.
- Eligible Microsoft 365 E5 customers will have 400 Security Compute Units (SCUs) per month for every 1000 user licenses, up to 10,000 SCUs per month. This included capacity is expected to support typical scenarios.
- Example 1: An organization with 400 seats gets 160 SCUs/month.
- Example 2: An organization with 4,000 seats gets 1,600 SCUs/month.
- You can purchase your desired number of SCUs within the Security Copilot product or Azure portal, or you will be able to access Security Copilot as part of your Microsoft 365 E5 subscription in the upcoming months.
- Use provisioned SCUs for expected, regular workloads. Flexible overage SCUs are available for unexpected or seasonal workload surges and are only charged for how many overage SCUs you use (up to your optional chosen overage limit).
- Estimate your SCUs with the capacity calculator. A free Azure subscription is required to access the tool.
- Security Copilot operates on a provisioned capacity and an overage capacity. Provisioned capacity is billed by the hour while the overage capacity is billed on usage.
Provisioned capacity (minimum 1 provisioned SCU) is priced per hour and billed monthly.
Overage capacity is billed for on-demand usage. To manage costs, customers can specify a maximum number of overage SCUs allowed in an hour to support occasional capacity spikes.
Your monthly bill is calculated based on the number of SCUs provisioned every hour for the month and any additional overage capacity used.
- You have 4 provisioned SCUs with an overage limit of 6 SCUs.
You execute a prompt that consumes 3 SCUs and uses incident summarization in Microsoft Defender, which consumes 0.5 SCU. Your total consumption for the hour is 3.5 SCUs, so you’ll be charged 4 SCUs at $4 per provisioned SCU, totaling $16 for that hour.
You execute a promptbook that consumes an additional 3.2 SCUs during the same hour, for a total of 7.2 SCUs for that hour.
You’ll be charged for 4 SCUs (at $4 per provisioned SCU) plus 3.2 SCUs (at $6 per overage SCU), totaling $35.20 for that hour.
- Visit the Security Copilot adoption hub for use cases and product demos, and when you're ready, learn how to get started. Find answers to frequently asked questions.
- [1]Prices are calculated based on US dollars. Prices are estimates only and are not intended as actual price quotes. Actual pricing may vary depending on the type of agreement entered with Microsoft, date of purchase, and the currency exchange rate. Sign in to the Azure pricing calculator to see pricing based on your current program/offer with Microsoft. Contact an Azure sales specialist for more information on pricing or to request a price quote. See frequently asked questions about Azure pricing.
Follow Microsoft Security