Microsoft Adds Risk-Based Controls for AI Agents

On October 19, 2026, GeekWire reported that Microsoft had unveiled Project Perception, a system that treats AI agents as potential insider threats and continuously assesses their risk, alongside a set of new security tools in its 365 E7 bundle. In a report dated October 20, TechCrunch said Microsoft introduced the security features on Monday, with the most notable addition being Guardian Agents, a feature under Project Perception that monitors the AI agents a company uses. TechCrunch noted that Project Perception was introduced in June and cited Microsoft CEO Nadella's earlier warning that agents enterprises deploy and pay for can pose risks much like insiders, because frontier models from labs other than OpenAI and Anthropic cannot be fully trusted.

Also on October 20, SiliconANGLE reported that Microsoft rolled out security controls for rogue AI agents that reduce what an agent may do as its assessed risk climbs. Hayete Gallot, executive vice president of Microsoft Security, described the risk in a blog post as the "agentic insider" and said enterprise agents are often overprivileged. A companion discovery tool can locate agents running inside a company.

The three reports differ slightly on timing: the Techmeme and SiliconANGLE items are dated October 19, while TechCrunch places the launch on Monday, and SiliconANGLE's article carries an update timestamp of 18:56 EDT on October 19. The public record currently stops at Microsoft's announcement of these tools and the Project Perception mechanism; the materials contain no further developments.