Microsoft Purview: Data Security Triage agent in DLP is generally available worldwide Beta
Data as of 2 hours ago (9 September 2026)
Description
The Data Security Triage Agent creates an agent-managed alert queue that identifies and prioritizes the DLP and IRM alerts that pose the greatest risk to your organization. It delivers a summary and clear explanation for why each alert was prioritized, helping analysts focus on what matters most. For this GA release, we’re introducing expanded coverage (which also includes Endpoint DLP alerts as well as alerts that leverage Custom SITs (Sensitive Information Types)) and support for Entra Agent ID.
Change history
Added to the roadmap 11 December 2025. Tracked here since 1 September 2026. Earliest target we recorded: December 2025 (since tracked — Microsoft may have moved it before we started watching).
Nothing has changed on this item since tracking began on 1 September 2026. Changes appear here as Microsoft updates the feed.