BT launches Microsoft Sentinel security service in UK

BT has launched a Security Operations Centre-as-a-Service offering for Microsoft Sentinel, aimed at UK public and private sector organisations.

The managed service combines Microsoft's Sentinel security platform with BT's security operations, threat intelligence and incident response support. It will provide round-the-clock monitoring, threat detection and response for customers seeking managed cyber defence without relying solely on internal teams.

The launch extends the companies' relationship in security, cloud and artificial intelligence services, and builds on BT's existing role as a managed security provider for Microsoft Sentinel.

BT said the move comes as organisations face a rise in cyber threats shaped by artificial intelligence. It cited figures from the Microsoft Digital Defence Report 2026 showing that the average time from discovery to weaponisation of security vulnerabilities has fallen to well below 24 hours.

Against that backdrop, BT says it blocks around four million attempted cyber-attacks across its network each day. It cited that scale as part of the case for combining its network visibility and security operations with Microsoft's software.

Growing pressure

Businesses and public bodies in the UK are under growing pressure to strengthen cyber defences as attacks become faster and harder to detect. The spread of AI tools has added to concerns by lowering barriers for attackers to automate reconnaissance, draft convincing phishing messages and shorten the time between identifying and exploiting weaknesses.

Managed security services have become one response for organisations that lack the staff or budget to run a full in-house security operation. BT's new service is aimed at that part of the market, combining the software platform, monitoring and operational support in a single offering.

BT said the service is designed to simplify deployment and management. It is also intended to help customers improve detection and response times while reducing operational complexity and controlling costs.

Jon James, Chief Executive Officer, BT Business, said: "AI is transforming the cyber threat landscape at unprecedented speed, and our customers need protection that stays one step ahead. By extending our partnership with Microsoft, we're combining cutting-edge security technology with BT's cyber expertise and threat intelligence to deliver stronger, more proactive protection. It's the latest example of how we're helping organisations build resilience and defend against the next generation of AI-powered threats."

Microsoft also framed the launch around the operational burden on security teams. It has sought to expand the use of Sentinel, its cloud-based security information and event management platform, through partnerships with telecoms and managed service providers that can run systems on behalf of customers.

Darren Hardman, Chief Executive Officer, Microsoft UK & Ireland, said: "AI is increasing the speed, scale and sophistication of cyber threats. By combining Microsoft Sentinel with BT's managed security expertise and UK cyber operations, we can help organisations simplify security, strengthen resilience and respond with greater confidence."

Broader push

The Sentinel service is part of a broader cyber security push by BT for UK organisations. It has also introduced other cyber tools and support for smaller businesses as it looks to widen access to managed security services beyond large enterprises and government users.

For BT, the launch also reflects a wider effort to deepen commercial ties with major technology partners while building service-led revenues in business markets. Cyber security remains one area where telecoms groups are trying to move further up the value chain by using their networks, customer relationships and operational scale to sell managed services.

The latest offer centres on a model in which customers use Microsoft technology through a service wrapper run by BT. That approach is intended to appeal to organisations that want to standardise on a major software platform but do not want to build and staff a full security operations centre themselves.

BT said the service combines Sentinel, managed operations, threat intelligence and UK cyber expertise in one offering.