Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
Important
Release Plans will no longer be published starting in September 2026. New Dynamics 365, Power Platform, and Dataverse capabilities will be published to the AI at Work roadmap beginning in September 2026. Existing release plans will remain available for historical reference until further notice. Learn more about the roadmap and disclosure changes at One always-on roadmap: Dynamics 365, Power Platform and Dataverse join the AI at Work roadmap.
| Enabled for | Public preview | General availability |
|---|---|---|
| Users, automatically | 
Jan 10, 2026 |
- |
Business value
The Power Pages security agent empowers makers to build secure, compliant websites without needing deep security expertise. By detecting vulnerabilities early, explaining risks in plain language, and enabling guided fixes directly within the design workspace, it reduces time to remediation and minimizes exposure to attacks. This not only strengthens overall site security and trust but also lowers operational costs by reducing manual reviews, dependency on specialized security teams, and downtime caused by misconfigurations.
Feature details
The Power Pages security agent is an AI-driven assistant embedded directly in the security workspace. It's available to all makers with access to the security workspace and can be enabled or disabled through environment-level feature controls through the Power Platform admin center.
Once enabled, the security agent appears as a chat panel on the right side of the workspace. It operates by analyzing site metadata, authentication settings, security configurations, vulnerability scans, and Web Application Firewall (WAF) and Distributed Denial of Service (DDoS) status. It synthesizes this information into actionable insights, flagging missing security headers, misconfigured permissions, outdated settings, and risky authorization behavior.
Makers interact with the feature through natural language queries, such as “Scan my site,” “Fix critical issues,” or “Explain my security posture.”
The agent proposes remediation actions and explains, in simple terms, what the problem is and what the actions do. At every step, it requests explicit approval before making any change, and it confirms completion once each action is applied.
Integrated with OWASP ZAP, WAF, DDoS protection, and site configuration APIs, the agent helps makers manage their site’s security posture with clear, guided recommendations. It simplifies complex security tasks and makes advanced protection accessible and actionable for every Power Pages maker.
Geographic areas
Visit the Explore Feature Geography report for Microsoft Azure areas where this feature is planned or available.
Language availability
Visit the Explore Feature Language report for information on this feature's availability.
Related content
Security agent (preview) (docs)