Microsoft treats enterprise AI agents as "agentic insiders": Project Perception adds Guardian Agents that score each agent's risk in real time and can restrict, gate or shut it down, Nadella says it puts his insider-risk essay into practice

Why it matters

【Key points】

Microsoft Security EVP Hayete Gallot published "Securing the agentic insider" on the Official Microsoft Blog at 21:00 CST on Oct 19, calling enterprise AI agents "agentic insiders" and positioning Project Perception (announced in July) to contain them. Satya Nadella posted at 21:05 CST that this puts his Oct 10 "models as insider risks" essay (e/797) into practice.

The post describes three layers: pull identity, data, cloud, endpoint, network and runtime signals to discover agents and give each an identity, container, policies and permissions; compute each agent's risk dynamically; and have Guardian Agents (green and blue teams) supervise every action in real time, respond as risk rises, and keep a trace for practitioners.

GeekWire adds (not in the blog): when risk rises the system can drop write access but keep read, require human approval, or shut an agent down; endpoint detection grows from 25 to 60 agent types, including Claude Code, Codex and GitHub Copilot; features sit in Microsoft 365 E7 ($99/user/month) and Perception. Microsoft Learn lists Perception as an invite-only limited public preview.

【Verifiable】

Microsoft blog: https://blogs.microsoft.com/blog/2026/10/19/securing-the-agentic-insider/

Nadella on X: https://x.com/satyanadella/status/2112168320946634932

GeekWire: https://www.geekwire.com/2026/microsoft-unveils-tools-to-monitor-and-corral-rogue-ai-agents/

Docs: https://learn.microsoft.com/en-us/security/agentic-security/agentic-security-get-started

【Our read】

1. The first product step from e/797: trust sits in a control layer outside the model, which is what Microsoft sells.

2. The post asks for chain-of-thought tokens to be visible to security systems, turning model transparency into a buying requirement.

3. Detecting rivals' coding agents pitches Microsoft as the control plane for every vendor's agents; it is still a preview.