Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
Important
Some information in this article relates to a prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here.
Developers can extend the capabilities of Microsoft Security Copilot through agents. By leveraging AI-driven automation, you can build specialized agents tailored to meet specific security and operational requirements of your organization. These agents can integrate with various security workflows, helping organizations maintain proactive and adaptive security postures.
Agents can be created, tested, and deployed to Active agents on Security Copilot using the Security Copilot standalone experience. You can quickly experiment with agent behavior and tool integrations for agent deployment.
The sections provide guidance to get started using the Security Copilot standalone experience to build, test, and publish agents to Security Copilot. The agent development experience gives you the flexibility to customize agents to fit your security workflows while ensuring you maintain full control over their capabilities and behavior.
Before you begin
Planning is an important first step to clearly define what you want the security agent to do. This involves deciding on the specific tasks and capabilities the agent will perform. For guidance on planning and understanding use cases, see Planning Guide.
Navigate to Build in Security Copilot
Creating an agent workflow generates a manifest file that is published to the Security Copilot platform. The first step in the workflow is to define the agent, including agent instructions and its associated tools, which are used to generate the Agent YAML file. For reference on the manifest schema, see Manifest.
Follow the steps to create an agent:
Sign in to Security Copilot (https://securitycopilot.microsoft.com).
Navigate to Build.
Choose the standalone experience
You can choose from the following experiences to build your custom agent.
| Feature | Description |
|---|---|
| Create an agent using natural language (NL2Agent) | Build agents simply by describing what you want in natural language. |
| Create agent from scratch using agent builder | Use the agent builder form in Security Copilot to configure agents from scratch. |
| Upload YAML | Upload an agent YAML file that is generated elsewhere. |
If you would like to build your custom agent using MCP tools, see MCP.