Microsoft Security Copilot vs Charlotte AI
Microsoft Security Copilot and Charlotte AI side by side: what each one is, what it costs to start, and whether you can try it free. Everything below comes from the vendors' own sites and other public sources, not from hands-on testing.
At a glance
| Microsoft Security Copilot | Charlotte AI | |
|---|---|---|
| Category | Cybersecurity AI | Cybersecurity AI |
| Starting price | $4/SCU/hr (checked October 2026) | Custom pricing (checked October 2026) |
| Free tier | Not listed | Not listed |
| Profile | Read profile | Read profile |
Prices are in US dollars unless shown otherwise. Confirm the current price on the vendor's site before you buy.
Key differences
Neither lists a free tier, so expect to pay to use either one.
Pricing is not directly comparable from the numbers we hold (Microsoft Security Copilot: $4/SCU/hr; Charlotte AI: Custom pricing), so check each vendor's pricing page.
Both are in our Cybersecurity AI category.
About each tool
Microsoft Security Copilot
Generative AI security assistant for Microsoft security teams, billed in compute units: $4 per SCU per hour provisioned, $6 overage; no monthly or per-seat price published.
Strengths
- Microsoft lists eight products that embed Security Copilot: Azure Firewall, Defender for Cloud, Defender Threat Intelligence, Defender XDR, Entra, Intune, Purview and Sentinel.
- Microsoft lists use cases including alert triage with step-by-step response guidance, KQL query building, suspicious script analysis, security posture management and stakeholder reports.
- Microsoft says plugins connect it to Microsoft and supported non-Microsoft services (its overview names ServiceNow and Jamf), plus the public web and custom plugins you build.
- Microsoft says agents pair data and code with an AI language model to automate repetitive tasks, and that no special training or extra license is required to use them.
- Microsoft says prompts and responses are encrypted in transit and at rest, and that by default no human users have access to the database.
- Microsoft says customer data is not used to train Azure OpenAI foundation models and is not shared with OpenAI.
Limitations
- Billing is usage-based in security compute units (SCUs): provisioned capacity is $4 per SCU per hour (minimum 1 SCU, billed monthly) and overage is $6 per SCU. Microsoft says agents consume SCUs the same as other features.
- The Microsoft 365 E5 inclusion is 400 SCUs a month per 1,000 user licenses, capped at 10,000 SCUs a month; Microsoft says E5 customers already using the product as of November 18, 2025 can access it now, and other E5 and E7 customers are activated in a phased rollout.
- Data sharing with Microsoft is on by default and owners can turn it off; Microsoft's privacy page says both that shared data is deleted within 30 days of opting out and that previously shared data is kept for not more than 180 days. Its data FAQ says session deletion sets a 30-day deletion window and logs are kept up to 90 days.
- Products that integrate as plugins must be purchased separately, and which plugins you can use depends on the services your organization uses.
Charlotte AI
AI security assistant in CrowdStrike Falcon for triage, investigations and agents; pricing is not published, eligible customers get 50 AI credits a month.
Who it is for
Security operations teams that already run CrowdStrike Falcon and want help with triage, investigations and workflow automation. The vendor also says non-expert users can operate the platform without learning documentation or script languages.
Strengths
- CrowdStrike lists prebuilt agents (for example Detection Triage, Response and Workflow Generation) plus conversational questions, promptbooks and conversion of questions into Real Time Response scripts.
- CrowdStrike says AgentWorks lets users build custom agents without code, choose the model, set which actions run automatically versus need approval, and use role-based permissions, execution traces, audit logs, credit caps and version rollback.
- CrowdStrike says Agentic SOAR combines agent reasoning with deterministic workflows, connects to other tools and agents through bidirectional MCP, and supports custom apps built with Falcon Foundry.
- CrowdStrike states Charlotte AI is certified under ISO/IEC 42001:2023 (AI governance).
- The vendor says the AI is trained on CrowdStrike analysts' decisions, and the datasheet says its LLMs are not trained on personally identifiable information (PII).
Limitations
- No Charlotte AI price is published. The FAQ and the Falcon pricing page do not say which Falcon plan includes it or list a per-credit rate; for additional credits the offer page says to contact CrowdStrike.
- Some features depend on other subscriptions: the datasheet says Charlotte AI for IT needs a Falcon for IT subscription and Incident Workbench needs Falcon Insight XDR.
- The pages read do not state data retention, data residency or whether customer data is used to train models, and they do not name the underlying models or hosting.
- The vendor's pages differ on cost: the datasheet promises pricing that 'won't surge with bursts in usage', while the FAQ and product page describe credit caps that control agent consumption. Confirm which applies to your contract.
