Explore Microsoft Security
Choose a solution, find practical articles and continue with Microsoft’s official documentation.
Published guide collections
Solution overviews
These summaries link to official documentation. Detailed blog coverage is still being developed for some areas.
Microsoft Agent 365
Observe, govern and secure AI agents through centralized inventory, lifecycle management and security oversight. Agent 365 brings together Microsoft Entra identity controls, Microsoft Purview data protection and Microsoft Defender threat protection.
Identity and access · Data security and AI protection · Threat investigation and response
Data Security Posture Management
Microsoft Purview DSPM helps identify sensitive data risks and brings related protection insights together, including risks involving AI applications.
Insider Risk Management
Identify and investigate potentially risky activity involving sensitive data, using authorized workflows and privacy controls.
eDiscovery & Audit
eDiscovery supports content preservation and legal investigations. Audit provides activity records for security and compliance investigations.
Defender for Endpoint
Endpoint prevention, detection, investigation and response. Device signals contribute to incidents and investigations in Defender XDR.
Defender for Cloud Apps
Visibility and security controls for SaaS applications, with activity monitoring and threat signals integrated into Defender XDR.
XDR Investigation & Response
Correlate signals across endpoints, identities, email and applications. Investigate incidents, hunt for threats and coordinate response actions.
Microsoft Entra ID
Identity and access management for users, applications and workloads. Explore authentication, Conditional Access and secure access design.
Entra ID Protection
Identify identity risks and support risk-based access decisions to help protect users and sign-ins.
Entra ID Governance
Manage identity lifecycles and access through access reviews, entitlement management and privileged identity management.
Entra Internet & Private Access
Identity-centric access controls for internet traffic and private applications. These products extend Zero Trust access beyond traditional network boundaries.
Microsoft 365 Copilot Security
Secure Copilot adoption through identity controls, data protection, permissions and collaboration governance. Microsoft 365 security spans several products.
Email & Collaboration Security
Protect Exchange, Teams, SharePoint and OneDrive through coordinated threat protection, access controls and data protection policies.
Microsoft Security Copilot
AI assistance for security and IT teams across Microsoft Defender, Sentinel, Entra, Intune and Purview. Security Copilot supports investigations and other security workflows; it is a separate solution from Microsoft 365 Copilot.
Sentinel Analytics & Hunting
Use centralized security telemetry to support detection, investigation and threat hunting across Microsoft and third-party sources.
Defender for Cloud
Microsoft Defender for Cloud combines cloud security posture management (CSPM), workload protection and DevSecOps security across multicloud and hybrid environments. Coverage includes servers, containers, storage and AI workloads. It integrates with security operations but has a distinct scope from Defender XDR.
