Microsoft published two posts on October 19 expanding Project Perception, its agent-security system, from outside attackers to the agents a company runs itself. The framing, echoed by CEO Satya Nadella, is that an agent should be treated as an insider risk and 'begin with no authority and receive only what it needs' — with the controls sitting outside the model, so a compromised agent cannot switch off the systems watching it.

The pieces: Entra Agent ID now extends to local and previously unknown agents, giving each one an identity separate from the person who launched it; Dynamic Agent Risk scores every agent continuously; Dynamic Conditional Access tightens what an agent may do as its score rises; Dynamic Permissions grant task-scoped, time-limited access; and agents can run inside the Microsoft Execution Container sandbox while Guardian Agents watch for trouble. Microsoft's endpoint security now recognizes 60 types of local agents, including Claude Code, OpenAI Codex and GitHub Copilot.

Coverage ties the bundle to a new Microsoft 365 E7 tier at $99 a seat. Neither official post gives firm rollout dates or preview labels, so the details to watch are availability and plan packaging, expected around Microsoft Ignite on November 17-20.