Microsoft Purview: Data Security Triage Agent in Data Loss Prevention - Reasoning Trace and Confidence Score for agent-triaged alerts
The Data Security Triage Agent in DLP will gain confidence scoring and reasoning trace transparency, allowing security analysts to understand agent decision logic and reliability. This enhancement reduces the need for manual review and enables SOC teams to progressively trust automation.
Key dates
- — preview (Status indicates feature is in development; general availability timing not specified)
Microsoft's description
This feature introduces confidence scoring and reasoning trace explainability into the Data Security Triage Agent in DLP, addressing a critical trust gap reported across multiple customers. Today, without transparency into why the agent makes a decision or how confident it is, analysts are forced to fall back to manual review — completely negating the automation value. The feature will surface a reasoning trace alongside each agent decision and a confidence score, giving analysts a clear signal of how reliable the agent's output is. This provides SOC teams with an auditable, explainable output they can validate rather than blindly trust, enabling them to progressively increase reliance on automation over time.