Introduction
Important
Some information in this module relates to a prereleased product which may be substantially modified before it's commercially released. Microsoft makes no warranties, expressed or implied, with respect to the information provided here. Project Perception is currently in Limited Public Preview. Limited Public Preview Program means Perception is available to a small, invitation-only set of customers for a defined preview window before broader public availability.
Attackers now operate at AI scale. They can generate exploits faster, scale campaigns further, and move laterally at machine speed. Meanwhile, most defensive tools still run one at a time. SOAR and other automation help within specific steps, but coordinating findings across the full workflow still falls to people. Defense hasn't caught up.
Being able to answer "What is Project Perception, and where does it fit?" in your own words is the base for many downstream decisions: whether it's the right tool for a specific problem, how it lines up with what you already run, and where it belongs on your team's roadmap.
Project Perception organizes specialized agents into three coordinated teams (Red, Blue, and Green) and runs them as a closed-loop system that continuously strengthens security posture. In the Microsoft Defender portal, you access it through a section called Agentic security.
Learning objectives
In this module, you'll:
- Describe Project Perception and the problem it addresses
- Recognize the shape of multi-agent defense
- Recognize the core capabilities Project Perception provides today