theinformation.com web signal

Microsoft's Gallot Cuts Security Ranks, Bets on AI Copilot

TL;DR

  • Gallot took over Microsoft's security group in February, replaced several senior leaders under predecessor Charlie Bell, and cut several hundred jobs.
  • She came from Google Cloud, where she was president of customer experience; her memo tells staff the unit needs to focus on AI for security.
  • Microsoft is leaning on Security Copilot for auto-response and on an internal tool called MDASH that uses AI models to scan software for weaknesses.

Cybersecurity's largest vendor is quietly reorganizing itself around the assumption that the incumbent way of selling security is running out of runway. Hayete Gallot, who returned to Microsoft in February as executive vice president of security after running customer experience at Google Cloud, sent a staff memo saying the unit needs to focus on AI for security, The Information reported. She has already replaced several senior leaders who reported to her predecessor Charlie Bell and cut several hundred jobs from a group that employs more than 10,000 people.

The product direction is where the strategy actually shows up. Security Copilot, Microsoft's OpenAI-powered assistant for cybersecurity teams, is being pushed toward taking direct action rather than just summarizing alerts. According to Aaron Holmes's reporting on X, the product can now identify suspicious emails and block dangerous senders before alerting IT staff. Microsoft is also building MDASH, an internal tool that uses several AI models to scan software for weaknesses.

Why this matters if you are not on Microsoft's security payroll. The largest seller of cybersecurity software is telling its own field it will defend enterprise networks with agents by default, not human analysts plus dashboards. That reprices the pitch from Palo Alto, CrowdStrike, and SentinelOne against the Microsoft bundle, and it puts pressure on any third-party static-analysis vendor MDASH could plausibly replace inside Microsoft's own stack.

The honest caveat is that the memo is single-sourced and the specifics are thin. The reporting does not name the executives who were replaced, does not give an exact headcount number, and does not put a release date on MDASH. What is on the record is a February leadership change, a recent staff memo, and a public product roadmap that already lines up with what Gallot is reportedly telling staff. For buyers heading into renewal season, that is enough signal to ask Microsoft's rivals what their AI-native answer looks like before the Copilot bundle prices it for them.