Agent 365 exits preview — goes live to detect, govern and remediate rogue agents

AI agents are starting to look less like chatbots and more like junior software workers. They can read documents, call tools, move data between apps, and sometimes act with their own credentials. That is useful — but it also creates a mess for IT and security teams, because a company can end up with dozens or thousands of semi-autonomous agents nobody really tracks. Microsoft’s move this week was to take Agent 365 out of preview and put it into general availability on May 1, which is basically the company saying this has become an operational problem, not a lab experiment. ### What is Agent 365, exactly? Agent 365 is Microsoft’s control plane for AI agents. In plain English, it is the dashboard and policy layer meant to show what agents exist, who owns them, what data and tools they can touch, how they are being used, and where risk is starting to show up. Microsoft positions it as a way to observe, govern, and secure agents across Microsoft’s own stack and partner ecosystems, not just inside one app. ### Why did Microsoft push it live now? Because “shadow AI” is no longer hypothetical. Microsoft’s pitch is that agents are already appearing across Microsoft 365, Teams, SaaS tools, endpoints, and local environments faster than governance teams can keep up. The company says the problem is not that agents exist — it is that they proliferate across apps, cloud services, and devices, often outside normal approval paths. ### What makes an agent riskier than a bot? The big difference is agency. A normal assistant suggests things. An agent can invoke tools, access data, and trigger actions. If permissions are too broad, a “helpful” workflow can quickly become data oversharing, tool misuse, or an automated process doing something nobody intended. That gets worse when agents can operate independently with their own credentials instead of only borrowing a user’s session. ### How big is the visibility gap? Microsoft and VentureBeat both put a number on it that makes the story land: 29% of agents in surveyed organizations operate without IT or security approval. Microsoft also says more than 80% of Fortune 500 companies are using AI agents, and IDC projects 1.3 billion agents in circulation by 2028. That combination is the whole thesis here — adoption is sprinting ahead while controls are jogging behind. ### What does the product actually show admins? The core pieces are a real-time overview dashboard and a centralized registry. The dashboard surfaces things like total registered agents, active users, growth trends, connected platforms, runtime hours, and risk signals. The registry acts as a system of record, listing each agent’s productivity. Basically, Microsoft wants every agent to have a paper trail. ### Is this only about Microsoft-built agents? No — and that is important. Microsoft says Agent 365 is expanding to cover agents built with Microsoft AI as well as ecosystem and SaaS partners, plus local and cloud agents discovered through Microsoft Defender and Intune capabilities now in preview. So the ambition is broader than “manage Copilot better.” The ambition is “be the company-wide map of agent activity.” ### What is the business angle? There is a straightforward upsell here. Agent 365 starts at $15 per user per month, and Microsoft is also bundling it into Microsoft 365 Enterprise E7 at $99 per user per month. But the more interesting angle is strategic — Microsoft is trying to own the governance layer for agentic work the same way it already owns a lot of identity, productivity, and endpoint control in big companies. ### Bottom line? The real news is not just that Agent 365 left preview. It is that Microsoft thinks companies have entered the “rogue agent” phase of enterprise AI, where the hard problem is no longer building agents — it is seeing them, naming them, and stopping them from doing something dumb at scale.