BT Business has launched a managed security service built on Microsoft Sentinel, pairing the operator's network and security operations with Microsoft's cloud security stack to defend enterprises and public sector organisations against AI-enhanced attacks.

The product, called Security Operations Centre-as-a-Service (SOCaaS), marks an extension of BT's partnership with Microsoft across AI, security and cloud. BT is positioning the service as a way for customers to cut the complexity of security operations, control costs and, in the operator's words, "improve detection, response and resilience".

The commercial logic is straightforward. BT supplies scale, security operations and network operations. Microsoft supplies what BT calls its "leading security technology" on the Sentinel platform. The managed wrapper means customers buy outcomes rather than tooling, a familiar pitch in a market where security operations centres have become expensive to staff and run in-house.

Why is BT pushing this now?

BT frames the launch around the accelerating tempo of AI-era attacks. The operator points to shortened attack timelines as the reason enterprises and public bodies need managed protection that keeps pace with automated adversaries.

BT Business CEO Jon James said: "AI is transforming the cyber threat landscape at unprecedented speed, and our customers need protection that stays one step ahead."

He added: "By extending our partnership with Microsoft, we're combining cutting-edge security technology with BT's cyber expertise and threat intelligence to deliver stronger, more proactive protection."

That is a vendor claim, and readers should treat it as such. What is concrete: the service exists, it runs on Microsoft Sentinel, and BT is selling it to UK enterprises and public sector organisations as a managed offering.

What does it change for practitioners?

For security and network teams at BT's enterprise customers, SOCaaS shifts monitoring, detection and response for the Microsoft stack to BT's security operations. Buyers gain a single contracted service instead of building and staffing Sentinel expertise internally. BT gains a recurring-revenue product that deepens its hold on customers' security estates.

The launch continues a pattern. BT Business has spent 2024 promoting enterprise security as a growth line. In May, it unveiled what it called industrial-grade security products for small and medium-sized businesses, built on technology from specialist vendor CrowdStrike.

The two moves show a deliberate segmentation:

• SMEs get packaged security products using CrowdStrike technology, announced in May.
• Larger enterprises and public sector organisations get SOCaaS on Microsoft Sentinel, announced now.
• Both rely on third-party security vendors rather than BT-built tooling, with BT supplying operations, scale and customer relationships.

Where does this fit in the market?

Telecom operators across Europe have pushed into managed security as enterprise connectivity revenue flattens. Security is one of the few enterprise lines where operators can charge for ongoing expertise rather than bandwidth. BT's approach — partnering with Microsoft for large accounts and CrowdStrike for smaller ones — follows the common template of an operator acting as the service layer over specialist security technology.

The Microsoft relationship carries weight beyond this product. BT describes the SOCaaS launch as the result of an extended relationship with Microsoft spanning AI, security and cloud, which suggests further joint offerings are likely as BT rebuilds its enterprise portfolio.

For UK CISOs, the practical question is whether BT's security operations scale and threat intelligence genuinely add capability on top of what they could buy directly from Microsoft. BT will need to demonstrate detection and response performance to make that case.

BT has not disclosed pricing or customer commitments for SOCaaS. Watch for reference deployments and metrics on detection times as the service moves from announcement to contracted customers, and for further Microsoft-backed products as the partnership deepens across AI and cloud.