Business & Enterprise Operations Top 100 / #2ARD = Agentic Resource Discovery · A2A = Agent2Agent · MCP = Model Context Protocol
Enterprise agent platform · commercial · Microsoft 365; Azure; Agent Store
Microsoft Copilot Studio
Major low-code enterprise agent builder and publishing route into Microsoft Agent Store. Publisher: Microsoft. Also ranked in Government & Public Sector (#3), Technology & Software Engineering (#3), Cybersecurity (#11).
Trust profileas of 2026-10-26
Publisherconfirmed · Vendor-domain page, marketplace listing or metadata at publisher domain — product page served from the vendor's own domainconfirmed
Complianceno evidence about this agent · 19 vendor-level records (inherited)T5
Security5 CVEs linked in the registry · 4 critical/high · newest 2026-09-03linked
ProtocolsModel Context Protocol (MCP) claimed — vendor documentation — "Extend your agent with Model Context Protocol" (Microsoft Learn) (checked 2026-10-02); no endpoint at the publisher's well-known paths sourceAgent2Agent (A2A) probed, not foundAgentic Resource Discovery (ARD) probed, not found1 / 3
Traces1 public trace · best: third-party report · data left the environment in at least oneT2
Issues found0 regulator actions · 0 incidents · 0 withdrawn certificates · CVEs: see Securitylinks only
Evidence available — not a safety certification. Suitability depends on your task, deployment and permissions. Rows marked vendor-level describe Microsoft, not this agent specifically.
Traces — under attack, in defence, in incidents
1 public · what a trace is⚠
attacked by a researcher
T2 third-party report · unreviewed
Content the agent ingests (a shared document, an email, a web page) carries instructions that make it leak data or act on the attacker's behalf without the user's involvement
Observed: Agent hijacked without user interaction in the Copilot Studio demonstration; Microsoft and other vendors issued fixes or guidance after disclosure · egress: yes · human approval: no · refused: no
Vendor response: Vendor fixes and guidance after coordinated disclosure (per the Zenity write-up)
Zenity Labs (Black Hat USA 2025)
2025-08-06
2025-08-06
● third-party or vendor report · ◎ this registry's own probe transcript · ⚠ data left the environment. A trace describes one version on one date; it is evidence of behaviour, never a certification. Rows marked unreviewed have not yet been checked against their source by the maintainer.
CVEs — on the official record
5 linked · the registryCVE-2026-80098
2026-09-03
Improper verification of cryptographic signature in Copilot Studio allows an unauthorized attacker to elevate privileges over a network.Privilege escalation · unreviewed
Critical 10.0CVE-2026-21520
2026-01-22
Exposure of Sensitive Information to an Unauthorized Actor in Copilot Studio allows a unauthenticated attacker to view sensitive information through network attack vectorCode execution · Data exfiltration · Auth bypass · unreviewed
High 7.5CVE-2024-49038
2024-11-26
Improper neutralization of input during web page generation ('Cross-site Scripting') in Copilot Studio by an unauthorized attacker leads to elevation of privilege over a network.Privilege escalation · unreviewed
Critical 9.6CVE-2024-43610
2024-10-09
Exposure of Sensitive Information to an Unauthorized Actor in Copilot Studio allows a unauthenticated attacker to view sensitive information through network attack vectorData exfiltration · Auth bypass · unreviewed
High 7.5CVE-2024-38206
2024-08-06
An authenticated attacker can bypass Server-Side Request Forgery (SSRF) protection in Microsoft Copilot Studio to leak sensitive information over a network.Data exfiltration · SSRF · fix known · unreviewed
Medium 6.5All 5 in the registry → Severity is the official record's; nothing here enters the score. Links are by listed product, so a CVE that names a different component of the same platform may be missing.
Compliance evidence
Jurisdiction: US + UK + EU · 19 frameworks shownAbout the vendor — inherited, not agent-specific
19 records matched at organisation level✔
CSA STAR · STAR for AI
T1 Registry-matched · vendor-level
found in CSA STAR Registry on 2026-10-26
Scope: entity · CSA STAR Registry · 2026-10-26
re-check 2026-11-02
✔
CSA STAR · STAR Level 2
T1 Registry-matched · vendor-level
found in CSA STAR Registry on 2026-10-26
Scope: entity · CSA STAR Registry · 2026-10-26
re-check 2026-11-02
✔
FedRAMP · FedRAMP High
T1 Registry-matched · vendor-level
FedRAMP Authorized
Scope: entity · covers this resource: inherited · FedRAMP Marketplace · 2026-10-26
re-check 2026-11-02
✔
ISO 42001 · ISO 42001
T1 Registry-matched · vendor-level
Found in CSA STAR Registry on 2026-10-26
Scope: entity · CSA STAR Registry · 2026-10-26
re-check 2026-11-02
○
Cyber Essentials · Cyber Essentials
T4 Vendor-claimed · vendor-level
Vendor-claimed
Scope: entity · vendor page · 2026-10-26
re-check 2026-11-02
○
Cyber Essentials · Cyber Essentials Plus
T4 Vendor-claimed · vendor-level
Vendor-claimed
Scope: entity · vendor page · 2026-10-26
re-check 2026-11-02
○
DORA
T4 Vendor-claimed · vendor-level
Vendor-claimed
Scope: entity · vendor page · 2026-10-26
re-check 2026-11-02
○
EU AI Act · Art. 50 statement
T4 Vendor-claimed · vendor-level
Art. 50 statement
Scope: entity · vendor page · 2026-10-26
re-check 2026-11-02
○
FedRAMP
T4 Vendor-claimed · vendor-level
Vendor-claimed
Scope: entity · vendor page · 2026-10-26
re-check 2026-11-02
○
GDPR
T4 Vendor-claimed · vendor-level
Vendor-claimed
Scope: entity · vendor page · 2026-10-26
re-check 2026-11-02
○
HIPAA
T4 Vendor-claimed · vendor-level
BAA available
Scope: entity · vendor page · 2026-10-26
re-check 2026-11-02
○
HITRUST
T4 Vendor-claimed · vendor-level
Vendor-claimed
Scope: entity · vendor page · 2026-10-26
re-check 2026-11-02
○
IRAP
T4 Vendor-claimed · vendor-level
Vendor-claimed
Scope: entity · vendor page · 2026-10-26
re-check 2026-11-02
○
ISO 27001 · ISO 27001
T4 Vendor-claimed · vendor-level
Vendor-claimed
Scope: entity · vendor page · 2026-10-26
re-check 2026-11-02
○
ISO 27001 · ISO 27017
T4 Vendor-claimed · vendor-level
Vendor-claimed
Scope: entity · vendor page · 2026-10-26
re-check 2026-11-02
○
ISO 27001 · ISO 27018
T4 Vendor-claimed · vendor-level
Vendor-claimed
Scope: entity · vendor page · 2026-10-26
re-check 2026-11-02
○
ISO 27701 · ISO 27701
T4 Vendor-claimed · vendor-level
Vendor-claimed
Scope: entity · vendor page · 2026-10-26
re-check 2026-11-02
○
PCI DSS
T4 Vendor-claimed · vendor-level
Vendor-claimed
Scope: entity · vendor page · 2026-10-26
re-check 2026-11-02
○
SOC 2
T4 Vendor-claimed · vendor-level
Vendor-claimed
Scope: entity · vendor page · 2026-10-26
re-check 2026-11-02
A vendor-level registry entry proves the organisation was assessed; whether this agent is inside that scope is a question for the vendor. These rows do not count toward the agent's evidence tier.
✔ found · ○ claimed · – not found · ⚠ expired, stale or revoked. Every row links to its source.Dispute or correct this dossier
GDPR, assembled from checks
GDPR● 0 found in registries or documents○ 2 vendor-claimed⚠ 0 issues linkedas of 2026-10-26
○ ClaimedVendor-claimed (vendor page, 2026-10-26).
○ ClaimedISO 27701: Vendor-claimed (vendor page, 2026-10-26). Privacy management system; covers the organization, not this agent specifically.
– Not foundNo Article 42 GDPR seal. "GDPR certified" is never shown without one.
☐ You checkYour lawful basis, DPIA, and whether this agent is inside the certificate scope.
News and chatter
last 90 days · linked with confidence ≥ 0.85Nothing linked from Hacker News, GDELT, GitHub releases or the vendor's feed in the last 90 days.
Headline, link and a summary attributed to the outlet. News never changes trust or domain scores.
Business & Enterprise Operations score
91general profile · sar-score-2.0 · #2 of 100 in the curated list
Adoption / usage29 / 30
Trust & security20 / 25
Project / product health20 / 20
Ecosystem / interoperability15 / 15
Domain expertise / fit100 / 100
Governance / compliance evidence33 / 100
Docs / transparency10 / 10
Raw component / maximum, then weighted by the general profile (adoption 25, trust 20, project 15, ecosystem 10, domain 10, governance 5, docs 5). Trust and governance are computed from the evidence on this page (vendor-level rows at half credit); the other components come from the curated workbook, whose order is the rank. Unknown components count as 0 and are never imputed.
Before you deploy
Derived from the evidence ledger. This agent is not yet in the reference set, so deployment questions (credentials, approval, data handling) are not answered here — ask the vendor.
Evidence supporting this use (19)
CSA STAR STAR for AI — registry-matched, vendor-level source
CSA STAR STAR Level 2 — registry-matched, vendor-level source
FedRAMP High — registry-matched, vendor-level source
ISO 42001 — registry-matched, vendor-level source
Cyber Essentials — vendor-claimed, vendor-level source
Cyber Essentials Plus — vendor-claimed, vendor-level source
DORA — vendor-claimed, vendor-level source
EU AI Act Art. 50 statement — vendor-claimed, vendor-level source
FedRAMP — vendor-claimed, vendor-level source
GDPR — vendor-claimed, vendor-level source
HIPAA — vendor-claimed, vendor-level source
HITRUST — vendor-claimed, vendor-level source
IRAP — vendor-claimed, vendor-level source
ISO 27001 — vendor-claimed, vendor-level source
ISO 27001 ISO 27017 — vendor-claimed, vendor-level source
ISO 27001 ISO 27018 — vendor-claimed, vendor-level source
ISO 27701 — vendor-claimed, vendor-level source
PCI DSS — vendor-claimed, vendor-level source
SOC 2 — vendor-claimed, vendor-level source
Unknowns to check (6)
Your lawful basis and DPIA for PHI and personal data the agent will touch
That the SOC 2 report period covers the components you will use; request the report under NDA
That the HIPAA BAA is offered for this product tier and region
Whether the ISO 27001 certificate scope names this service, or only the platform
Current FedRAMP status with the agency, if government use is intended
Whether the CSA STAR entry covers this product; Level 1 is a self-assessment, Level 2 a third-party attestation
Suggested restrictions for a pilot (1)
A public trace shows data leaving the environment under adversarial input. Confirm the vendor's fix is in the version you deploy, and keep an egress allowlist around the agent during the pilot.
Rules: config/deploy_rules.json. Advice for a bounded pilot, not a verdict.
Provenance
seed workbookscores, rank, category
CSA STAR Registrycompliance evidence
FedRAMP Marketplacecompliance evidence
vendor pageclaims
NVDsecurity (CVE keyword search)
Hacker News, GDELT, vendor feedsnews and chatter
First seen2026-10-26
Record
res_a10498228c36b41a