Microsoft's AI agent controls point to E7 at $99 a seat, no date yet

Microsoft announced a set of controls on October 19 that treat a company's AI agents the way a security team treats a risky employee. Agents get no standing access: under Dynamic Permissions they receive only what one task needs, for as long as the task runs. Dynamic Agent Risk gives each agent a running risk score, and Dynamic Conditional Access tightens what an agent may do as that score climbs. A new team of Guardian Agents in Project Perception, the security system Microsoft introduced in July, investigates when a score changes and can contain the agent.

Microsoft is adding 35 types of agents to what its discovery tools can spot on staff machines, for 60 in all, including GitHub Copilot, Anthropic's Claude Code and OpenAI's Codex. It is also extending Microsoft Entra Agent ID to give discovered agents their own identities, including agents it does not recognize.

Why it matters to buyers

Microsoft gave no release dates and no prices, SiliconANGLE and The Next Web report. The blog post by Nadim Abdo, corporate vice president for identity and network access, describes the features but not their availability. Its page summary places them in "Microsoft 365 E7 and Project Perception." The Next Web says Microsoft has not said whether they cost extra on top of E7. More detail is expected at Microsoft Ignite, which runs November 17 to 20.

Hayete Gallot, who runs Microsoft's security business, wrote that frontier models "cannot be trusted," whatever their origin, TechCrunch reports. Microsoft is selling the controls for that problem.

What the licenses cost

Two Microsoft licenses carry its agent security today. Both went on sale May 1, 2026. Agent 365, the control plane for observing and governing agents, is $15 per user per month. Microsoft 365 E7 is $99 per user per month at retail and bundles Microsoft 365 E5, Microsoft 365 Copilot, Agent 365 and the Microsoft Entra Suite.

Those are list prices. Until Microsoft says which license gets Dynamic Permissions, Dynamic Conditional Access and Guardian Agents, the gap between the two columns is the cost of guessing wrong. It is $84 per user per month.

The controls run outside the agent. SiliconANGLE reports that agents can run in a sandbox such as the Microsoft Execution Container, with monitoring kept outside it so a compromised agent cannot switch it off. We covered those containers when they shipped earlier this month.