Microsoft Purview: Data Security Triage Agent in Data Loss Prevention - Reasoning Trace and Confidence Score for agent-triaged alerts
Microsoft Purview's Data Security Triage Agent in DLP will gain confidence scoring and reasoning trace transparency, enabling SOC teams to understand agent decisions and gradually increase automation reliance without manual review overhead.
Key dates
- — preview (Feature currently in development; no GA date announced)
Microsoft's description
This feature introduces confidence scoring and reasoning trace explainability into the Data Security Triage Agent in DLP, addressing a critical trust gap reported across multiple customers. Today, without transparency into why the agent makes a decision or how confident it is, analysts are forced to fall back to manual review — completely negating the automation value. The feature will surface a reasoning trace alongside each agent decision and a confidence score, giving analysts a clear signal of how reliable the agent's output is. This provides SOC teams with an auditable, explainable output they can validate rather than blindly trust, enabling them to progressively increase reliance on automation over time.