Microsoft recently introduced at Build 2026 Microsoft Scout, an always-on agent. Scout belongs to a new category of agents Microsoft called Autopilots: always-on agents that work autonomously on a user’s behalf with their own identity, without needing to be prompted each time. Microsoft Scout integrates with Work IQ and is based on the open-source agent framework OpenClaw.
Microsoft argued that after being equipped to do simple, limited-in-scope tasks by miscellaneous technologies like MCP, agents and agent frameworks are increasingly tackling complex, long-run tasks, thus moving further beyond chatbots’ interactive question/answer paradigm:
Work is moving forward in new ways, with the rhythm shifting from single exchanges to something more continuous. Most systems still stop at answering the question. The real unlock is in the follow-through, where systems hold your priorities and act on them for you, under your control.
Scout is built on the open-source agent framework OpenClaw, originally created by Peter Steinberger, who recently joined OpenAI. OpenClaw self-describes as “The AI that actually does things.” Like OpenClaw, Scout can execute highly privileged local operations, including reading and writing local files, executing shell scripts, applying code patches, launching specialized sub-agents for parallel tasks, and automating browser sessions. Scout also supports Model Context Protocol (MCP) servers, allowing developers to extend Scout’s access to local resources and third-party developer tools.
With several real-world disasters and horror stories already made public (e.g., the 500-message spam loop), some analysts expressed early concerns about the security model used in OpenClaw:
The verdict is clear: until the core architecture is rewritten for security-first isolation, no one—home users or enterprises—should be running this tool. The productivity gains are not worth the total system compromise currently being handed to attackers on a silver platter.
A critical engineering component of Scout is thus arguably its security architecture. Microsoft seeks to mitigate the risks by assigning each Scout instance its own governed Entra identity. Rather than running under a generic shared service account, Scout acts as an attributable entity within the corporate directory. Its credentials are scoped to individual tasks, redacted from diagnostic logs, and bound by Microsoft Purview sensitivity labels and Data Loss Prevention policies. For highly sensitive operations, the agent requires human sign-off before execution, acting as a final safeguard against unauthorized system modifications.
Microsoft Scout also leverages Work IQ, Microsoft’s artificial intelligence layer that integrates data from Microsoft applications (e.g., SharePoint, Teams, Outlook, OneDrive, Dataverse) and persists an understanding of how individuals and teams work. Work IQ also ships with scoped permissions, policy enforcement, runtime observability, and other enterprise security and compliance features.
Developers can get access to Microsoft Scout by accepting the terms of the Frontier preview program. Enabling the agent requires a gated process: an organization must attest to the Frontier terms in the Microsoft 365 admin center, and IT administrators must explicitly push the desktop app to user machines via an Intune policy. Users must also hold an active GitHub Copilot Business or Enterprise license to authenticate.
As is often the case, the developer community’s reaction has been a mix of architectural curiosity, security skepticism, and humor. On Hacker News, one user alluded to continuously reported software quality problems of Microsoft’s software suite by emphasizing the appeal of an agent that would spare users from interacting with it:
Maybe Microsoft can figure out how to monetize not having to use Windows as a service.
“You don’t have to use Teams and Outlook any longer” is certainly a nice pitch.
On Reddit’s r/microsoft_365_copilot community, user WaffleToasterings clarified the differences between the private preview and the Frontier preview:
The Frontier version is essentially OpenClaw on desktop that can connect to the Graph plus WorkIQ, except it does utilise your hardware meaning your device must be on. Microsoft Scout in Private Preview is a cloud-based Autopilot agent.
Microsoft Scout is available as a desktop application for Windows 11 and macOS 12.