A salesman knocks on the IT director's door. He hands over a worksheet with two numbers on it. The first is the cost of the agent revolt. The second is $99 a month, per worker. He asks which one you'd rather budget for.

That's the pitch Microsoft made on May 1.

Microsoft Agent 365 hit general availability that day, the company's "control plane for AI agents" — a centralized governance layer that promises to discover, observe, and secure every agent operating across the enterprise, including the ones running on AWS Bedrock and Google Gemini Enterprise. Standalone, it costs $15 per user per month. Bundled into a new SKU called Microsoft 365 Enterprise E7 — Microsoft's "Frontier Worker Suite" — it runs $99 per user per month.

For comparison, Microsoft 365 E5 has historically sat around $57.

The core argument Microsoft is making is fear. In the launch materials, the company warns that ungoverned AI agents could become corporate "double agents" — software acting on behalf of employees but operating outside the company's visibility. To make that real, Defender now flags unmanaged local agents on Windows endpoints, starting with the OpenClaw platform. Intune blocks them. Windows 365 for Agents, a new Cloud PC class designed to host agents in isolated sandboxes, entered public preview alongside the launch.

Microsoft also added registry sync with AWS Bedrock and Google Gemini Enterprise. Inventory all your agents in one console — even the ones not running on Microsoft. The stack is closing around the agentic enterprise the same way it closed around endpoints in 2008 and identity in 2018.

Here's the part that stings. Most companies don't have a runaway-agent problem yet. They have an agent-curiosity problem. A few teams are testing Copilot Studio, somebody on marketing wired up a Zapier-Anthropic flow, the CFO read a Bloomberg piece about shadow AI. That's the actual landscape. Microsoft is selling a $99-a-month seat to address it.

The clever part of the bundle: at $99, E7 isn't priced as a security product. It's priced as the thing every Microsoft 365 customer will be told to upgrade to in the next renewal cycle. The "Frontier Worker" framing is doing exactly what it sounds like — turning every knowledge worker into someone who needs governed agent access by default.

My Opinion

I'll be blunt. This is fear-based pricing dressed up as enterprise security.

The "double agent" framing is clever marketing. It conjures the spy thriller — your laptop secretly working for the other side, your contracts being read by a model that reports to someone else. It's also vague enough that no one can ever say the threat has been mitigated, which means the subscription is forever. That's a feature, not a bug. Microsoft just turned agent governance into rent.

What bugs me more is the SKU shape. Microsoft already charges for Copilot. It already charges for Defender. It already charges for Intune. Now it bundles those into E7, tacks Agent 365 on top, and tells buyers that anything less is a double-agent risk. Every other vendor in this space — AWS, Google, the open-source projects — has a cheaper or simply free path to the same outcome. Microsoft is betting your procurement team won't notice. Historically, that's been a fine bet.

The thing worth watching isn't the launch. It's the next twelve months. When customers try to inventory the agents running on Bedrock and Gemini through Microsoft's console, we'll find out whether this is real cross-cloud governance or a Microsoft-shaped funnel that pressures buyers off competing platforms. My guess: it's the funnel. Anthropic and Google will publish their own "control planes" by Q3, and the agent governance market will look like the SIEM market — three vendors charging too much, none of them solving the actual problem.

Until then, $99 per worker per month is the new floor for being told you're safe.

Author: Yahor Kamarou (Mark) / www.humai.blog / 03 May 2026