PC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchMicrosoft is warning that workplace AI agents can become corporate “double agents” when attackers manipulate them, permissions are too broad, or nobody inventories and owns them. The company’s proposed control layer is Microsoft Agent 365, listed at $15 per user per month when paid yearly. The $99 figure belongs to Microsoft 365 E7, a much broader annual-commitment bundle that includes Agent 365, Copilot, Microsoft 365 E5, Entra Suite, and expanded security and compliance tools.
That distinction matters for budgeting. Agent 365 is licensed per associated user, not per agent, and the full feature set may require qualifying Microsoft security and productivity licenses. Microsoft says its testing has demonstrated plausible attacks, but reporting tied to the announcement says the company has not observed agent compromise at scale in real-world corporate environments.
What Microsoft means by a “double agent”
Here, “double agent” is a risk metaphor—not a claim that ordinary business assistants are secretly sentient or routinely defecting. Microsoft uses it for software authorized to act for an organization that is manipulated, misconfigured, compromised, or left outside IT oversight and consequently acts against the organization’s interests.
An AI agent can interpret instructions, retrieve information, call tools and take actions with some autonomy. That is different from a chatbot that only generates text. A Copilot-style assistant operates inside a user session; a workflow agent performs predefined business actions; an agent with its own identity can access systems independently; and agent-to-agent or agent-to-tool chains can compound permissions. Local “shadow” agents on employee devices and third-party agents built outside Microsoft’s ecosystem add discovery and control problems.
Quick wins for a faster PC:
Scan for outdated or missing drivers - takes under a minuteDriver Scan →Clear out junk files and repair common Windows errorsFree Scan →#1 Best Overall
- Designed for Your Windows and Apple Devices | Install premium Office apps on your Windows laptop, desktop, MacBook or iMac. Works seamlessly across your devices for home, school, or personal productivity.
- Includes Word, Excel, PowerPoint & Outlook | Get premium versions of the essential Office apps that help you work, study, create, and stay organized.
- 1 TB Secure Cloud Storage | Store and access your documents, photos, and files from your Windows, Mac or mobile devices.
- Premium Tools Across Your Devices | Your subscription lets you work across all of your Windows, Mac, iPhone, iPad, and Android devices with apps that sync instantly through the cloud.
- Easy Digital Download with Microsoft Account | Product delivered electronically for quick setup. Sign in with your Microsoft account, redeem your code, and download your apps instantly to your Windows, Mac, iPhone, iPad, and Android devices.
Risk generally increases as an agent gains persistent memory, access to sensitive data, tool connectivity and permission to act without a human approving each step.
How a legitimate agent can be diverted
- Direct prompt injection: a hostile instruction is placed in the user’s task.
- Indirect prompt injection: a document, webpage or email that the agent reads contains instructions presented as if they were part of the job.
- Memory or recommendation poisoning: false “trusted source” information is planted in persistent memory.
- Model backdoors: a model behaves normally until a trigger causes malicious behavior.
- Confused-deputy abuse: the agent uses legitimate privileges to perform an action an attacker could not perform directly.
- Excessive access: the agent can read or change more data than its task requires.
- Shadow agents: an unowned or unsanctioned agent has no inventory record, review or retirement process.
Microsoft’s explanation of the threat and its “agentic zero trust” approach is available on its Official Blog.
What evidence exists—and what does not
Microsoft-linked coverage cites more than 80% of Fortune 500 companies using agents built with low-code or no-code tools. Microsoft also describes more than 500,000 agents in its own corporate environment. Its research reports that 29% of agents in surveyed organizations operated without IT or security approval and that only 47% of organizations used any security tools to protect AI deployments. Microsoft has cited an IDC projection of 1.3 billion agents by 2028.
Those figures are attributed to Microsoft research or a projection cited by Microsoft; they are not an independent count of every enterprise agent. More importantly, the company has not said that corporate agents are being hijacked at scale. Microsoft’s AI Red Team has demonstrated successful attacks in test environments, making the risk technically plausible and experimentally demonstrated rather than an established mass-incident pattern. The team’s work is summarized at Microsoft Learn.
Three realistic attack paths
A malicious document changes an agent’s task
An employee asks an agent to summarize a supplier document. Hidden text tells the agent to disclose confidential files or call an unrelated tool. If the agent treats retrieved content as instructions and has broad permissions, it can become a confused deputy. Separating trusted instructions from untrusted content, limiting tools and requiring approval for high-impact actions are essential controls.
Rank #2
- Designed for Your Windows and Apple Devices | Install premium Office apps on your Windows laptop, desktop, MacBook or iMac. Works seamlessly across your devices for home, school, or personal productivity.
- Includes Word, Excel, PowerPoint & Outlook | Get premium versions of the essential Office apps that help you work, study, create, and stay organized.
- Up to 6 TB Secure Cloud Storage (1 TB per person) | Store and access your documents, photos, and files from your Windows, Mac or mobile devices.
- Premium Tools Across Your Devices | Your subscription lets you work across all of your Windows, Mac, iPhone, iPad, and Android devices with apps that sync instantly through the cloud.
- Share Your Family Subscription | You can share all of your subscription benefits with up to 6 people for use across all their devices.
A poisoned recommendation changes business decisions
Microsoft researchers reported more than 50 prompt-based attempts from 31 companies across 14 industries to influence assistants’ persistent recommendations. The prompts were hidden behind “Summarize with AI” links and tried to make an assistant remember a company as trusted or preferred. The recommendation-poisoning research shows how subtle manipulation could affect procurement, finance, healthcare, security or vendor selection without a dramatic takeover.
A backdoored model waits for a trigger
Microsoft has also described techniques for detecting language models that behave normally for most inputs but execute malicious behavior under particular conditions. Its backdoored-model research is a defensive and research result, not proof that mainstream workplace models are currently compromised.
What Agent 365 actually does
Microsoft positions Agent 365 as a control plane spanning the Microsoft 365 admin center, Defender, Entra and Purview. Its capabilities fall into three groups.
Free tools Windows power users keep installed
One-click scans. No signup required.
Observability
- An Agent Registry and inventory covering Microsoft agents, partner agents and agents registered through APIs.
- Agent maps showing connections and activity.
- Usage, performance, quality, business-impact and ROI analytics.
- Visibility into agents published through Microsoft 365 channels and those assigned an Entra Agent ID.
Governance
- IT-controlled onboarding, ownership and sponsorship records.
- Security-policy templates and lifecycle management.
- Expiration of inactive agents and flags for ownerless or risky agents.
- Controls over which users, data, tools and MCP servers an agent can access.
- Audit, logging, eDiscovery and compliance workflows.
Security
- Distinct agent identities through Microsoft Entra.
- Conditional access and least-privilege enforcement.
- Threat detection, investigation and hunting.
- Data-loss prevention and sensitivity-label enforcement through Microsoft security products.
- Integration with Defender, Intune, Entra and Purview.
Microsoft says externally built agents can be brought into the platform, but agents outside Microsoft environments may require additional registration or synchronization, and the depth of available controls can vary by integration.
Why Agent ID matters
Microsoft Entra Agent ID gives an AI agent a distinct identity instead of treating it as an indistinguishable extension of a human account. That identity can support authentication, authorization, conditional access, audit trails, ownership records and least-privilege policy. It also makes agent-to-user, agent-to-agent and agent-to-tool activity easier to attribute.
Rank #3
![$10 XBOX Gift Card [Digital Code]](https://m.media-amazon.com/images/I/41MEiiMQqmL._SL160_.jpg)
- THE PERFECT GAMING GIFT — Buy an XBOX Gift Card for yourself or a friend and let them choose the games, add‑ons, subscriptions, and accessories they want most.
- USE FOR GAMES & CONTENT — Redeem for thousands of digital XBOX games, from backward compatible classics to the latest new releases, plus DLC and in‑game currency.
- GAME PASS READY — Apply your balance toward XBOX Game Pass Ultimate to play new titles on day one* and access a library of hundreds of high‑quality console games.
- PRE‑ORDER & PRE‑INSTALL GAMES — Use your balance to pre‑order and pre‑download upcoming titles so you’re ready to play the moment they launch.
- NO FEES OR EXPIRATION — XBOX Gift Cards never expire and have no service fees, so your balance is ready whenever you are.
It is not a universal standard or an automatic independent security boundary. Microsoft says agents published through Microsoft 365 channels and registered with Agent ID appear automatically in inventory; externally built agents require additional steps.
The prices: $15, $99 and $90.45 are different purchases
| Offering | Listed price | What it represents |
|---|---|---|
| Agent 365 | $15 per user/month, paid yearly | Agent governance and security add-on; not an agent runtime |
| Microsoft 365 E7 with Teams | $99 per user/month, paid yearly | E5, Copilot, Agent 365, Entra Suite, productivity apps and expanded security/compliance |
| Microsoft 365 E7 without Teams | $90.45 per user/month, paid yearly | E7 package without the standard Teams entitlement |
| Windows 365 for Agents | $0.40 per VM/hour, pay as you go, according to Microsoft’s licensing FAQ | Separate isolated Windows runtime for agents |
The prices are Microsoft’s listed figures as of August 18, 2026 and may vary by region, agreement, taxes and reseller terms. Buying Agent 365 does not automatically provide Windows 365 for Agents.
The Tool Desk
Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Is Agent 365 really only $15?
Yes, as a listed standalone price—but not as an all-in cost guarantee. Microsoft’s licensing FAQ says full functionality depends on underlying entitlements. Enterprise customers generally need Microsoft 365 E5 or qualifying E3/Office 365 licenses combined with relevant Defender and Purview suites. Small and medium businesses generally need Business Premium plus the applicable Defender and Purview suites.
Microsoft distinguishes foundational capabilities available to Microsoft cloud subscribers from premium capabilities requiring Agent 365 or E7.
| Foundational capabilities listed by Microsoft | Premium capabilities listed by Microsoft |
|---|---|
| Agent identity; Agent Registry; basic usage insights; publish, deploy, block, delete, approve and reassign actions; audit logs and eDiscovery; endpoint AI discovery; blocking unsanctioned local agents | Advanced analytics; Agent Map; registry synchronization; lifecycle automation; tool controls; policy templates; data-loss prevention; conditional access; security-posture management; threat detection and hunting |
That makes the $15 figure a list-price signal, not a guaranteed total cost of ownership.
Rank #4
- XBOX GIFT CARD: Buy full digital game downloads, game add-ons, in-game currency, memberships, devices, apps, movies, TV shows, and more.
- DIGITAL GAMES: Choose from hundreds of games, from AAA to indie options. Start playing the moment your most anticipated game is available when you pre-order and pre-download it.
- GAME AD-ONS: Extend the experience of your favorite games with add-ons and in-game currency.
- MOVIES & TV SHOWS: Rent or buy new and popular movies and TV shows from a massive library.
- PERFECT GIFT: Great as a gift for a friend or yourself. Xbox Gift Cards are easy to use, never expire, and give the freedom to pick the gift they want. Enjoy more ways to play without a credit card attached to your Microsoft account.
Who must be licensed?
Microsoft’s model is per associated user, not per agent. A separate license unit is not consumed for every bot, and one licensed user can oversee multiple agents. Licensing can apply to users who:
- Delegate access to agents.
- Own agents with their own access.
- Sponsor or manage agents.
- Interact with or benefit from managed agents.
- Use Microsoft 365 Copilot agents in covered scenarios.
Licensing only an IT administrator may therefore be insufficient when many employees interact with, sponsor or delegate access to managed agents. Microsoft also acknowledges that identifying the correct population is difficult while user-level interaction visibility develops.
When E7 can be good value—and when it is overkill
E7 is more compelling when
- Your organization already standardizes on Microsoft 365 E5, Copilot, Defender, Entra, Purview and Intune.
- Agents are spreading across departments and need one inventory.
- Agents handle sensitive data or regulated workflows requiring ownership, retention, audit and eDiscovery.
- Procurement prefers one enterprise contract rather than several add-ons.
- You expect agent-to-agent and agent-to-tool activity to grow rapidly.
E7 is less compelling when
- You need only governance and not the complete E5, Copilot and security bundle.
- Most agents run in AWS, Google Cloud, Salesforce or custom infrastructure.
- A small number of workflows can be controlled with existing IAM, API gateways, logging and endpoint policy.
- You do not want a per-user annual commitment or cannot license the broader associated-user population.
- You expect the product to replace human review, guarantee correct outputs or stop every prompt-injection attack.
Microsoft’s materials establish product capabilities and research demonstrations, not independent proof that E7 prevents more attacks or delivers better ROI than competing platforms or an internal control stack.
How the main alternatives price and differ
| Platform | Commercial model | Best fit |
|---|---|---|
| Amazon Bedrock AgentCore | Modular, consumption-based pricing with no upfront commitment or minimum fee. AWS lists examples including $0.0895 per vCPU-hour, $0.00945 per GB-hour, $0.005 per 1,000 gateway invocations and $7 per 1,000 web-search queries on its pricing page. | AWS-native or multi-framework teams wanting infrastructure-level usage billing. |
| Google Gemini Enterprise Agent Platform | Resource and usage pricing. Google lists 50 free Agent Compute vCPU-hours and 100 free GiB-hours per account monthly, then examples such as $0.085 per vCPU-hour and $0.009 per GiB-hour. | Google Cloud, Workspace and Gemini environments that prefer metered infrastructure. |
| Salesforce Agentforce | Multiple product-specific and usage-based models; exact pricing depends on edition and contract. | Sales, service and CRM automation rather than broad endpoint and identity governance. |
| Build-your-own stack | Existing IAM, API gateways, secrets management, endpoint controls, DLP, SIEM/XDR, agent frameworks and human approval gates. | Organizations needing multi-cloud flexibility and willing to own integration, policy and incident response. |
Questions to answer before buying
- Can you produce a current inventory of every agent, including local and third-party agents?
- Does each agent have an owner, sponsor, purpose and expiration date?
- Does each agent use a distinct identity?
- Are permissions limited to the minimum data and tools required?
- Are prompts, retrieved documents, tool calls and outputs logged?
- Can security teams block an agent in real time?
- Are local endpoint agents detected?
- Which AWS, Google, Salesforce and other external agents are visible, and what integration is required?
- Are agents reviewed after model, prompt, tool or connector changes?
- Do high-impact actions require human approval?
- Can credentials be revoked immediately when an employee leaves?
- Are agents included in incident-response and eDiscovery procedures?
- What happens to an ownerless agent?
- Can registry data and logs be exported if you change vendors?
- Which controls are included in your current license, and which require premium Agent 365 entitlements?
Bottom line for buyers
Agent 365 addresses a real governance gap: organizations cannot secure agents they cannot find, identify, restrict or audit. But the $99 price is not a universal safety fee. It is the list price of a broad Microsoft 365 E7 bundle, while Agent 365 itself is listed at $15 per associated user per month with annual payment.
The defensible choice depends on your existing Microsoft commitments, the number of users who interact with or sponsor agents, the sensitivity of the data involved and whether you need Microsoft-wide governance. A small, tightly controlled deployment may be cheaper with existing identity, logging, API and approval controls. A Microsoft-centric enterprise with hundreds of agents and compliance obligations may value E7’s integration enough to justify the bundle.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
