Microsoft's New AI Security Service Can Find Bugs, Simulate Attacks and Write Patches, All in Minutes

Key points

• Microsoft's Project Perception, entering public preview on 3 August, uses multiple AI agents to find vulnerabilities, simulate attacks and suggest fixes automatically.
• Microsoft trained its own model, MAI-Cyber-1-Flash, specifically to hunt for security flaws in complex codebases.
• MAI-Cyber-1-Flash combined with GPT 5.4 scored 96% on the CyberGym benchmark, 12 points ahead of Anthropic's Mythos 5, at roughly half the cost.
• The system was built by a Microsoft team called FORGE, which includes members of Team Atlanta, the group that won the DARPA AI Cyber Challenge.
• A multi-model design means the system picks whichever AI is cheapest for a given job, rather than routing everything through the most powerful option.

Most companies that get hacked are not short of security tools. They are short of people. Finding a software flaw, confirming attackers can exploit it, writing a detection rule, and patching the underlying code are four separate jobs that might involve four different specialists. Microsoft wants to hand all four to software agents: automated programs that carry out multi-step tasks on their own.

The new service is called Project Perception. Microsoft announced it this week and plans to open it to enterprise customers on 3 August.

How does it actually work?

Perception connects three types of AI agent, each with a specific role. Think of it as a security team running a fire drill on your own systems, automatically, every time a new threat surfaces anywhere in the world.

When an analyst feeds the system a report about a new hacking group, the agents divide up the work. One set scans the organisation's systems to see which parts could be targeted. A second set, playing the attacker, probes those parts for weaknesses and ranks them by danger. A third writes detection rules (instructions that tell security software what suspicious activity to look for) and drafts patches, meaning software fixes, for the vulnerabilities it found. The system can even submit those patches directly to the internal code repository where a company stores its source code.

"We've gone from this taking hours and hours of manual work for multiple specialised folks across the security organisation to having a fix for all of this in minutes," said David Weston, a corporate vice president at Microsoft Security who leads Perception.

Do you need the most powerful AI to pull this off?

No, and that is the more interesting finding. Microsoft built MAI-Cyber-1-Flash from scratch on cybersecurity tasks rather than general knowledge. The model is roughly ten times smaller than GPT 5.4. Smaller means cheaper to run.

Used inside MDASH, Microsoft's multi-model coordinator that decides which model handles which task, MAI-Cyber-1-Flash takes on about 90% of routine security jobs. GPT 5.4 handles what remains. The combination scored 96% on CyberGym, a benchmark that tests AI against real cybersecurity problems. Anthropic's Mythos 5, estimated at 10 trillion parameters (think of a parameter as one tiny dial the AI has learned to tune), scored 12 points lower at considerably higher cost.

A well-designed system beats raw computing power. That is the same lesson our 16 July story "AI Finds Bugs Fast. Proving They're Real Still Takes a Human." drew from a different angle: speed of discovery counts for nothing if the architecture behind it cannot tell signal from noise.

FORGE (Frontier Offensive Research and Generative Exploration), the Microsoft team behind the project, is led by Georgia Tech professor Taesoo Kim. Several members previously competed in the DARPA AI Cyber Challenge, a two-year US government competition for building AI that can defend critical open-source software. Their team, Team Atlanta, won.

What does this mean for ordinary people?

Perception is an enterprise product, so most readers will not interact with it directly. Patches and threat detections that once took days may now arrive in hours. Organisations that could not previously afford large security teams may get meaningful automated protection.

The flip side is worth watching. The same approach that lets defenders automate threat hunting also lets attackers automate vulnerability discovery. A University of Toronto study published recently showed a self-replicating AI worm built on a free, small model using a comparable coordinator design. As we noted on 16 July, AI agents that make decisions autonomously break assumptions that four decades of security thinking was built on.

If you work somewhere that uses Microsoft's security products, ask your IT team when they plan to evaluate Project Perception. The public preview starts 3 August.

Common questions

Does this replace human security staff?

Not entirely. Perception handles the repetitive, time-consuming parts of an analyst's day, but humans still set priorities, approve major changes and investigate anything the agents flag as unusual.

Is my personal data affected?

Project Perception is a tool for corporate security teams. It analyses a company's own systems, not personal accounts or individual user data.