The question that always lands after the Security Copilot demo is the same one: what’s this going to cost. The honest answer is unsatisfying. It depends entirely on how you size it, and most people get the sizing wrong in one of two directions. They either reserve a pile of capacity they never use and quietly bleed money, or they run it too lean and watch it fall over in the middle of the one investigation where they actually needed it.

Start with your licence. If you’re on Microsoft 365 E5 or E7, Security Copilot is included with a monthly SCU allowance, and you don’t need to provision or buy anything to start. Most of this post is about the standalone route, where you buy capacity yourself, and about what to do if the included allowance isn’t enough.

So this is the sizing post.…