Insights
A visual overview of the whole catalog — how product capabilities map to security control categories and the AI surfaces they protect.
The graph behind the catalog
The schema itself — how the content types relate and what attributes describe them. This shows the model, not the content: the entities, the references between them, and the enums that classify a capability. Drag a node to explore; hover to trace its connections.
View data table
| From | Relationship | To |
|---|---|---|
| Products | vendor | Vendors |
| Capabilities | product | Products |
| Capabilities | categories[] | Categories |
| Capabilities | appliesTo[] | appliesTo |
| Capabilities | lifecycle[] | lifecycle |
| Capabilities | sources[] | sources[] |
| Scenarios | core[] / supporting[] | Capabilities |
| Solutions | scenarios[] | Scenarios |
| Solutions | tier | Tiers |
| Guides | topics[] | Solutions |
| Guides | scenarios[] | Scenarios |
| References | capabilities[] | Capabilities |
| References | products[] | Products |
| References | categories[] | Categories |
| References | scenarios[] | Scenarios |
| References | source | source |
Coverage flow
How capabilities flow from AI domain, through the security control category they enforce, to the Microsoft product that delivers them.
View data table
| Control category | Capabilities | Products |
|---|---|---|
| Governance | 45 | 19 |
| Monitoring | 34 | 16 |
| Data Protection | 26 | 11 |
| Discovery | 22 | 11 |
| Compliance | 16 | 8 |
| Identity & Access | 16 | 13 |
| Threat Detection | 15 | 9 |
| Agent Security | 14 | 8 |
| AI Safety | 10 | 5 |
| Network Protection | 9 | 6 |
| Supply Chain | 8 | 4 |
| Incident Response | 7 | 5 |
Capabilities by product
How many capabilities each Microsoft product contributes to the catalog.
View data table
| Product | Capabilities |
|---|---|
| Microsoft 365 Admin Center | 16 |
| Microsoft Power Platform admin center | 13 |
| Microsoft Foundry | 12 |
| Microsoft Entra Internet Access | 7 |
| Microsoft Defender XDR | 6 |
| Microsoft Purview | 6 |
| Azure API Management | 5 |
| SharePoint Advanced Management | 5 |
| Microsoft Purview Data Loss Prevention | 4 |
| Microsoft Sentinel | 4 |
| Microsoft Copilot Studio | 3 |
| Microsoft Purview Information Protection | 3 |
| Azure API Center | 2 |
| Microsoft 365 App Compliance Program | 2 |
| Microsoft Defender for Cloud | 2 |
| Microsoft Defender for Endpoint | 2 |
| Microsoft Entra ID Governance | 2 |
| Microsoft Intune | 2 |
| Microsoft Purview Insider Risk Management | 2 |
| SharePoint Online | 2 |
| Azure Monitor | 1 |
| Microsoft 365 Archive | 1 |
| Microsoft Dataverse | 1 |
| Microsoft Defender for Cloud Apps | 1 |
| Microsoft Entra Agent ID | 1 |
| Microsoft Entra ID | 1 |
| Microsoft Entra ID Protection | 1 |
| Microsoft Purview Compliance Manager | 1 |
| Microsoft Purview Data Lifecycle Management | 1 |
| Microsoft Purview Data Security Posture Management | 1 |
| Microsoft Security Copilot | 1 |
| Windows 365 for Agents | 1 |
Control coverage by surface
How many capabilities each security control category brings to each AI surface — darker cells mean deeper coverage, faint or empty cells reveal gaps. Categories are ordered by total coverage. Select a cell to open the matching capabilities.
View data table
| Category | Agents | Users | Endpoints | Infrastructure | Data |
|---|---|---|---|---|---|
| Governance | 35 | 12 | 4 | 15 | 10 |
| Monitoring | 25 | 13 | 4 | 4 | 11 |
| Data Protection | 8 | 13 | 0 | 2 | 24 |
| Discovery | 15 | 8 | 5 | 3 | 3 |
| Compliance | 11 | 7 | 0 | 0 | 11 |
| Identity & Access | 15 | 6 | 1 | 2 | 2 |
| Agent Security | 13 | 3 | 2 | 4 | 1 |
| Threat Detection | 13 | 2 | 1 | 4 | 3 |
| AI Safety | 9 | 2 | 2 | 3 | 2 |
| Network Protection | 3 | 4 | 4 | 3 | 2 |
| Supply Chain | 8 | 0 | 0 | 5 | 0 |
| Incident Response | 6 | 2 | 0 | 1 | 1 |
Catalog by tier
How the catalog rolls up. Each tier shows four side-by-side bars — its topic, scenario, capability and guide counts — so you can compare where the catalog is deep or thin at a glance.
View data table
| Tier | Solutions | Scenarios | Capabilities | Guides |
|---|---|---|---|---|
| Discover & trust | 3 | 7 | 33 | 3 |
| Identity & access | 1 | 1 | 6 | 2 |
| Enterprise data foundation | 2 | 5 | 23 | 0 |
| Prevent, detect & respond | 3 | 5 | 23 | 1 |
| Build & workload foundations | 3 | 8 | 38 | 1 |
Content update activity
When solutions, scenarios, capabilities, and guides were last updated. Darker days saw more content change — a calendar view of the catalog's cadence.
View data table
| Date | Updates |
|---|---|
| 2026-09-14 | 2 |
| 2026-09-10 | 1 |
| 2026-08-27 | 10 |
| 2026-08-26 | 2 |
| 2026-08-14 | 1 |
| 2026-08-08 | 1 |
| 2026-08-03 | 12 |
| 2026-07-29 | 6 |
| 2026-07-27 | 1 |
| 2026-07-24 | 9 |
| 2026-07-23 | 18 |
| 2026-07-22 | 12 |
| 2026-07-20 | 1 |
| 2026-07-17 | 42 |
| 2026-07-16 | 5 |
| 2026-07-07 | 11 |
| 2026-06-17 | 2 |
| 2026-06-15 | 1 |
| 2026-06-12 | 2 |
| 2026-05-28 | 1 |