Inspira launches two Microsoft Security Copilot agents
Inspira Enterprise has launched two security agents on the Microsoft Security Store, expanding its Security Copilot Agent Portfolio.
The new products, both built for Microsoft Security Copilot, are the MITRE ATT&CK Coverage Insight Agent and the Initial Triage Agent. They are intended to help security teams review detection coverage and manage early-stage incident triage in Microsoft environments.
The MITRE ATT&CK Coverage Insight Agent is designed for Microsoft Sentinel. It evaluates analytic rule coverage against the MITRE ATT&CK framework, identifies detection gaps, generates detection recommendations, and assigns maturity scores for security operations centres.
Each run produces an executive summary of ATT&CK coverage, an overall coverage percentage, tactic- and technique-level breakdowns, a list of uncovered techniques, and recommended remediation guidance. It also provides example Sentinel-compatible KQL queries and risk assessment information for leadership and SOC teams.
The agent is limited to analysis and does not execute queries or modify rules. This is intended to help teams review missing detections and refine rule coverage without changing existing configurations.
The second product, the Initial Triage Agent, focuses on incidents in Microsoft Sentinel and Microsoft Defender XDR. It performs deterministic triage using native data from those services and returns structured output including a verdict, confidence score, classification reasoning, attack timeline, and recommended actions.
It also identifies the incident source and gathers metadata, alerts, entities, comments, status, and classification context. In addition, it compares current incidents with historical cases involving similar entities or alert patterns. The agent can assess new, open, and closed incidents.
Like the coverage tool, the triage product is read-only. It does not modify incidents, alerts, or configurations, and is intended to support faster triage and more consistent handling of Tier-1 investigations.
Microsoft positions Security Copilot as an artificial intelligence security product for threat response and risk assessment. Its storefront allows customers to find, purchase, and deploy partner agents and other integrated tools for security operations.
According to Microsoft, Security Copilot agents are designed to handle high-volume security and IT tasks and work with Microsoft security products and partner offerings. The system combines a large language model with a security-specific model informed by Microsoft threat intelligence and more than 84 trillion daily signals.
Vasu Jakkal, Corporate Vice President of Microsoft Security, commented on the broader partner ecosystem around the service.
"AI is the force multiplier for defenders, and when partners bring their agentic innovation into the Security Copilot ecosystem, the impact is exponential. Together, we're not just building tools-we're creating a new era of intelligent, collaborative cyber defense," Jakkal said.
Inspira framed the launch around pressure on security leaders to improve response times and reduce analyst workloads. It said the products were designed to help organisations assess their exposure to threats and vulnerabilities while strengthening workflows in security operations centres.
Chetan Jain, Managing Director, Inspira Enterprise, said, "In today's fast-evolving threat landscape, CISOs are under constant pressure to accelerate threat detection, reduce analyst fatigue, and build a thorough understanding of their vulnerabilities and adversary exposure. With agents now generally available in Microsoft Security Copilot, we are equipping organisations with the intelligence and automation needed to proactively strengthen defences and build cyber resilience."
"By integrating Inspira's deep technical acumen in cybersecurity with the advanced capabilities of Microsoft Security Copilot, our offerings empower organisations to adopt a more proactive, intelligence-driven cybersecurity approach - scaling detection coverage and SOC response in lockstep."
"We are pleased to announce that Inspira Enterprise now has two agents generally available on the Microsoft Security Store, both purpose-built within Microsoft Security Copilot to help security teams strengthen defences and accelerate operations," said Jain.
Inspira operates in cybersecurity, data analytics, and artificial intelligence services across North America, ASEAN, the Middle East, Africa, and India. It says it has more than 1,600 professionals and serves more than 550 clients across sectors, including banking, healthcare, the public sector, manufacturing, education, oil and gas, and utilities.