TrustRadius: an HG Insights company

Microsoft Security Copilot FAQ Detail

Score8.5 out of 10

49 Reviews and Ratings

Back to FAQ

Vendor Evaluation Criteria for AI Security Tools

24 citations from LLM engines

According to TrustRadius reviews, buyers evaluating Microsoft Security Copilot focus on its ability to streamline security operations and enhance productivity. Key criteria mentioned by reviewers include its capacity for threat detection, incident response, and alert management by summarizing data from various platforms. Its seamless integration with the existing Microsoft ecosystem, including Defender, Sentinel, and Intune, is a significant consideration. Reviewers also evaluate its utility for generating and reviewing code, particularly PowerShell and Python scripts. However, some reviewers also raise concerns about the tool's accuracy, reporting limitations, and a lack of cost transparency, which are important factors in their evaluation.

Prompt Questions

  • which ai security copilot vendors have the strongest enterprise support and sla commitments?

  • what vendor evaluation criteria matter most when sourcing an ai-powered security operations assistant?

  • what compliance certifications should organizations look for when evaluating ai security copilot vendors?

Threat Detection and Incident Response

4 mentions

Reviewers evaluate Microsoft Security Copilot on its ability to function as a virtual cybersecurity assistant. They not…

Reviewers evaluate Microsoft Security Copilot on its ability to function as a virtual cybersecurity assistant. They note its effectiveness in managing high volumes of alerts by summarizing and correlating data, providing step-by-step guidance during incidents, and generating queries for threat hunting.

Security Copilot helps our security teams manage overwhelming volumes of alerts by summarizing and correlating data across Microsoft Defender, Sentinel, and other platforms.
Engineer in Information Technology (large)View Full review
Microsoft Copilot for Security acts as a virtual cybersecurity assistant that helps us streamline threat detection, incident response, and compliance management.
Board Member in Information Technology (small)View Full review
Alert triage & summarization (cutting down investigation time significantly) Incident response guidance (step-by-step recommendations during live events) KQL/query generation for faster hunting in tools like Sentinel Threat intelligence enrichment to add context automatically
Analyst in Information Technology (large)View Full review
in incident response , I provide the symptoms I can see and ask Microsoft Security Copilot to give me multiple scenarios where can I chose which is most likely the one happening.
Engineer in Engineering (large)View Full review

Integration with Microsoft Ecosystem

2 mentions

A key evaluation criterion is the tool's integration capabilities. Reviewers state that it seamlessly connects with oth…

A key evaluation criterion is the tool's integration capabilities. Reviewers state that it seamlessly connects with other Microsoft products like Defender, Sentinel, Intune, and Entra ID, allowing it to interpret security data and monitor configurations across the Microsoft environment.

It seamlessly integrates with Microsoft Defender, Sentinel, and Intune, and Copilot leverages AI to interpret the majority of our security data and provide actionable insights through natural language prompts.
Board Member in Information Technology (small)View Full review
We use it to review all of the different configurations we have within Microsoft. So from our Entra ID to our on-prem Active Directory, as well as our Exchange settings and all of that good stuff for O365. So we're just monitoring that environment and that platform using the Microsoft Security Copilot agents that are available.
C-Level Executive in Information Technology (large)View Full review

Code and Script Assistance

3 mentions

Some reviewers assess Microsoft Security Copilot's value based on its ability to assist with development and automation…

Some reviewers assess Microsoft Security Copilot's value based on its ability to assist with development and automation tasks. They use it to write and review code, check syntax, and fix errors in Python and PowerShell scripts.

One of the main business problems we had was integrating Microsoft Security Copilot to write code. So that is really useful for speeding up coding time and reviewing it.
Consultant in Information Technology (large)View Full review
Microsoft Security Copilot helps in writing small code snippets, mostly python and powershell , used for automation.
Engineer in Engineering (large)View Full review
I have used Microsoft Security Copilot while working with various PowerShell scripts to help with syntax and errors.
Manager in Information Technology (large)View Full review

Performance and Accuracy

1 mention

The reliability of the AI is a critical point of evaluation for some users. One reviewer finds the tool's intelligence…

The reliability of the AI is a critical point of evaluation for some users. One reviewer finds the tool's intelligence to be lacking, noting that it is frequently incorrect and requires constant redirection.

To be honest, the entire Microsoft Security Copilot suite is severely lacking. In my experience, it's not very intelligent. It's frequently wrong. You have to constantly give it redirection.
Engineer in Information Technology (large)View Full review

Reporting and Cost Visibility

2 mentions

Reviewers consider practical aspects like reporting and cost. They mention that while information can be copied and pas…

Reviewers consider practical aspects like reporting and cost. They mention that while information can be copied and pasted, the tool cannot natively produce report documents. A significant concern is the lack of visibility into the costs of add-ons and total potential expenses.

One of my things is trying to get reports out of that. I wish it were a little cleaner. Right now, you can get the information through Microsoft Security Copilot. You can copy that information and paste it elsewhere. It cannot actually produce the document itself.
Professional in Information Technology (large)View Full review
For Microsoft Security Copilot, it would be awesome to have a hover over all the add-ons to understand what the cost is or the percentage of cost against an SEU is. So, if there are five add-ons for this particular agent or the default agent within Microsoft Security Copilot, what is the total cost? Once you add that up, where can we see, as a customer, that this is going to? If this is fully utilized, how it should be, it's going to cost X. And right now, again, no visibility. And I just can't stress that enough that it's amazing that our hands are tied because of the lack of visibility.
Consultant in Information Technology (small)View Full review
And so if I could tell a better story with Microsoft Security Copilot, that makes my job a lot easier.
Professional in Information Technology (large)View Full review

Showing top 5 topics · 13 total quotes across all topics

No quotes available.