St. Luke’s University Health Network uses Security Copilot in Microsoft Defender as the “connective tissue” across its security stack. In practice, this means the AI-powered agents pull together information from different security tools into a single, consolidated view of:

• Security alerts
• Access controls
• Vulnerabilities

Instead of analysts jumping between multiple dashboards, Security Copilot helps them see the full picture in one place and respond more quickly and consistently.

St. Luke’s reports a clear productivity gain from using AI-powered Security Copilot agents. By consolidating alerts, access control data, and vulnerability information into one AI-assisted experience, the organization now saves nearly 200 hours every month in its security operations.

This time savings comes from:

• Reducing manual investigation across multiple tools
• Speeding up triage and response to alerts
• Automating parts of the analysis that previously required repetitive human effort

Those reclaimed hours can be redirected to higher-value security work and strategic initiatives.

Security Copilot helps St. Luke’s reimagine its security workflow by acting as an AI-powered assistant that sits on top of Microsoft Defender and the broader security stack. It:

• Unifies data from alerts, access controls, and vulnerability tools into one coherent view
• Guides analysts through investigations with AI-generated insights and context
• Reduces noise by helping teams focus on the most relevant and risky issues first

As a result, the security team can move from reactive, tool-by-tool analysis to a more integrated, AI-assisted approach that supports faster, more informed decision-making.