Microsoft has launched Microsoft Scout, an always-on personal agent for Microsoft 365. It is the company's first product in a new category of agents it calls Autopilots.
Scout is designed to work across Microsoft 365 applications including Teams, Outlook, OneDrive and SharePoint. Users interact with it through Teams, while a desktop app extends access to browser activity, local resources and model context protocol servers.
The software remains active in the background and can act on a user's behalf with its own identity. This allows Scout to carry out tasks within permissions and policies set by users and their organisations.
The launch marks Microsoft's push beyond systems that respond only when prompted. Scout is intended to follow ongoing work, retain context and take action without repeated user input.
How it works
Microsoft says Scout is built to reduce routine coordination work during the day. It can schedule meetings across time zones, flag important meetings and prepare materials in advance.
The agent can also identify upcoming deliverables and block out time in a user's calendar. It is designed to detect risks such as stalled decisions so users can address them before they become blockers.
Over time, Scout builds context through what Microsoft calls Work IQ. The system learns how people work, what they prioritise and what should happen next, with the aim of making the agent more relevant to day-to-day tasks.
Security controls
Microsoft says Scout has been built to operate within existing organisational controls on Microsoft 365. Each agent runs under its own governed Entra identity rather than a shared service account, making actions attributable to a known actor.
Credentials tied to that identity are scoped to the specific task, redacted from logs or diagnostics and managed in the same way as other first-party Microsoft services. Microsoft says this is intended to ensure users can see whose authority the system used when it acted on their behalf.
Access to resources and destinations is restricted to those approved by an organisation. Sensitive actions can require human sign-off before completion, while Microsoft Purview data protection policies, including sensitivity labels and loss prevention, are enforced before anything is sent or written.
Scout does not bypass existing protections and instead works within policies organisations have already configured. That positioning is likely to matter for large companies weighing the use of autonomous software in workplace systems that handle email, documents and internal communications.
Open-source element
Microsoft says Scout is built on OpenClaw open-source technology. The company is contributing policy conformance directly upstream to OpenClaw so organisations running that software can validate whether their environments meet security and compliance requirements and receive an audit-ready answer.
The move links an open-source base with the governance, identity and access controls in Microsoft's workplace software stack. That approach could help the company appeal to customers seeking more autonomy from AI tools without loosening internal controls.
Early rollout
Microsoft employees have already been using an early desktop version of Scout. Internal testing, according to the company, shows the agent taking on coordination tasks, surfacing risks earlier and keeping work moving without constant prompting.
The next phase is a limited rollout to a select group of customers in private preview and to Frontier organisations.
Scout is being offered as an experimental release through Frontier. Access requires Frontier enrolment, Intune policy configuration and an opt-in attestation. Users with a GitHub Copilot licence can then download and install the software.
The launch adds to competition among major technology companies to make AI agents a more persistent part of office software. Microsoft's approach with Scout centres on embedding an autonomous assistant inside the everyday tools many information workers already use, while tying its actions to identity, permissions and existing compliance controls.