Microsoft’s New Security Copilot Tool Uses GPT-4 to Quickly Respond to Threats


Microsoft announced the release of a new Security Copilot tool for cyber security professionals. The AI-powered chat assistant is designed to help analysts better understand potential threats and assess risk exposure to prevent security breaches in their environments.

Microsoft’s Security Copilot feature is based on OpenAI’s GPT-4 generative AI and its own proprietary security models. The service integrates with other security products (such as Microsoft Defender and Microsoft Sentinel) to create a summary of potentially malicious activities in natural language. It also provides step-by-step incident remediation guidance to quickly respond to threats.

“Our cyber-trained model adds a learning system to create and tune new skills. Security Copilot then can help catch what other approaches might miss and augment an analyst’s work. In a typical incident, this boost translates into gains in the quality of detection, speed of response and ability to strengthen security posture,” said Vasu Jakkal, CVP, Security, Compliance, Identity, and Management.

Microsoft's New Security Copilot Tool Uses GPT-4 to Quickly Respond to Threats

How does Security Copilot work to provide end-to-end protection?

Microsoft highlighted that Security Copilot can help to reverse engineer security vulnerabilities. The AI-powered tool can also surface potential threats in real time, predict the next move of attackers, and answer security questions. Microsoft Security Copilot can also provide recommendations to help researchers improve their skills.

Microsoft acknowledged that its new Security Copilot solution could potentially make mistakes. However, the company emphasized that customer data would be protected by enterprise compliance controls. Microsoft also promised that user data or business processes won’t be used to train its AI models.

“Security Copilot is a closed-loop learning system, which means it’s continually learning from users and giving them the opportunity to give explicit feedback with the feedback feature that is built directly into the tool,” Jakkal added.

Microsoft Security Copilot availability

Microsoft Security Copilot is currently available in preview for enterprise customers. However, there is no word on when it will become generally available for all businesses. At launch, the AI tool only supports Microsoft security solutions, but Microsoft plans to add support for third-party products in the future.

Recently, Orca Security, a cloud security provider, announced its ChatGPT extension that provides step-by-step remediations to help security teams mitigate the impact of breaches. It’s great to see Microsoft catching up to grow its market share in enterprise security.