Compare
Lustena vs Microsoft Agent 365
Microsoft Agent 365 is a control plane for agents built and run in the Microsoft stack, governed through Entra, Defender, Intune and Purview. Lustena governs the agents your people already use across vendors, from ChatGPT and Claude in the browser to code agents, and works alongside Agent 365 in Microsoft 365 shops.
When to pick each
Lustena or Microsoft Agent 365
Lustena
Agent 365
Pick it when
Lustena
Your people use AI from several vendors in the browser, build agents in code, and you need owners, limits and evidence for all of them, mapped to GDPR, the EU AI Act and the standards you are assessed against.
Agent 365
Your agents live mostly in Microsoft 365 Copilot, Teams, Copilot Studio and Foundry, and you already run Entra, Defender, Intune and Purview.
Governance
Lustena
Versioned limits per agent in six dimensions: tools, MCP servers, hosts, data classes, autonomy and schedule. Crossed limits reach your channels through webhooks.
Agent 365
Agent governance in the Microsoft 365 admin experience, with agent identities in Entra. Registry sync with AWS Bedrock and Google Cloud is in public preview.
Security
Lustena
Twelve data classes classified on the device, including email addresses, payment cards, API keys, private keys and national formats such as Brazil's CPF and CNPJ, and Brazilian phone numbers. Findings are content-free; warn, block or redact per data class on the Enterprise plan. A red-team scanner runs ten agent-native checks mapped to the OWASP LLM Top 10.
Agent 365
Defender and Purview controls applied to agents. Chrome DLP on Windows needs the Purview browser extension.
Observability
Lustena
Sessions per app, team and agent, model and volume per agent through the SDK and the LiteLLM connector, one audit trail and evidence packages for GDPR, EU AI Act, ISO/IEC 42001, NIST AI RMF, AIUC-1 and LGPD.
Agent 365
Observability for Copilot, Teams, Copilot Studio and Foundry agents and selected partner agents. Local agents are in public preview.
Deployment
Lustena
A browser extension published by policy through Google Admin, Microsoft Intune or Jamf; most teams see their first agents within an hour. Nothing is installed inside the agents. Self-hosted and SSO on the Enterprise plan.
Agent 365
Runs inside your Microsoft 365, Entra, Defender, Intune and Purview tenant. Licensed per user, standalone or within Microsoft 365 E7.
Capability matrix
Side by side
Microsoft Agent 365 capabilities are drawn from Microsoft's public documentation and announcements as of October 2026. We build Lustena, so read us as an interested party.
Sources: Microsoft Security blog: Agent 365 generally available (May 1, 2026); Microsoft Learn: DSPM for AI considerations.
- Offered
- Partial or preview
- Not documented
- Not offered
| Capability | Lustena | Agent 365 |
|---|---|---|
| Agent identity | ||
| Microsoft 365 Copilot, Teams, Copilot Studio and Foundry agents | Partial or preview Copilot use in the browser | Offered |
| ChatGPT custom GPTs and Claude projects, each with a named owner | Offered | Not documented |
| Code agents: CrewAI, LangGraph, Google ADK, Agno, OpenTelemetry | Offered Python SDK | Not documented |
| Claude Code, Cursor and Codex | Offered MCP server | Not documented Claude Code and GitHub Copilot CLI announced as expanding soon |
| Agents on AWS Bedrock and Google Cloud | Not offered | Partial or preview Registry sync in public preview |
| Agent identities in Microsoft Entra | Not offered SSO through your identity provider on the Enterprise plan | Offered |
| Governance and security | ||
| Versioned limits per agent in six dimensions | Offered | Not documented |
| Data controls on prompts sent to AI apps in the browser | Offered Warn, block, redact on the Enterprise plan | Offered Purview; Chrome on Windows needs its extension |
| Third-party AI site detection on macOS | Offered Chrome, Edge, Chromium | Partial or preview Insider Risk Management detection not supported on macOS |
| Deployment | ||
| Rollout through Microsoft Intune | Offered Also Google Admin and Jamf | Offered |
| Self-hosted deployment | Offered Enterprise plan | Not documented |
Frequently asked questions
Does Lustena replace Microsoft Agent 365?
Not in a Microsoft 365 shop. Agent 365 governs the agents built and run on Microsoft's path. Lustena covers the agents your people use outside it, such as ChatGPT, Claude and Gemini in the browser and agents built in code, and keeps one inventory with owners and limits across all of them.
When is Microsoft Agent 365 a better choice than Lustena?
When nearly all of your agents are Microsoft 365 Copilot, Teams, Copilot Studio or Foundry agents, your identity lives in Entra and you already license Defender, Intune and Purview. In that case the bundle, the Entra identity model and the installed base are real advantages.
Can we run both?
Yes. Lustena rolls out through Microsoft Intune as a browser extension and does not install anything inside your agents, so it sits next to Agent 365 rather than in its path.
Does Lustena cover employees on macOS?
Yes. The extension runs on Chrome, Edge and Chromium wherever they run, and Firefox and Safari are available on the Enterprise plan. Microsoft documents that third-party AI site detection through Insider Risk Management is not supported on macOS.
Which privacy laws does Lustena support?
GDPR and LGPD. Findings are content-free by default, any capture requires a written lawful basis, and personal data classes, including national identifiers such as Brazil's CPF and CNPJ, are classified on the device. Evidence packages also map to the EU AI Act, ISO/IEC 42001, NIST AI RMF and AIUC-1. Lustena prepares the evidence; independent assessors certify.