Key Highlights

  • Microsoft's last disclosed security revenue figure is the "more than $20 billion" trailing-twelve-month number CEO Satya Nadella cited in January 2023. Security is not a reportable segment, and no updated figure was verifiable.
  • Fiscal 2026 third-quarter revenue was $82.9 billion, up 18%, with Microsoft Cloud at $54.5 billion and Azure up 40%. Fiscal fourth-quarter results are due, after this article's cut-off.
  • Capex of $30.9 billion in the March quarter and roughly $190 billion guided for calendar 2026 has compressed free cash flow and left the shares near a one-year low at $389.10.
  • The nearer-term variable is the 29 July report, whether Azure acceleration and fiscal 2027 capex framing justify a multiple that has already de-rated.

Microsoft (NASDAQ:MSFT) has shipped an aggressive run of agentic-AI security products in 2026, from Agent 365 to a multi-agent vulnerability scanner. Investors heading into 29 July earnings face a harder question: it still has not disclosed a security revenue figure in more than three years.

A Security Story Arriving in an Earnings Week

Microsoft Corporation (NASDAQ: MSFT) enters the last week of July 2026 split between its product narrative and its stock. Six months of AI-agent security releases, identity, monitoring, containment and data governance layered onto Entra, Defender and Purview, sit against shares that closed at $389.10, a market capitalisation near $2.89 trillion, per aggregated market data.

The fiscal year ends 30 June; Microsoft confirmed on 8 July it will report fiscal fourth-quarter and full-year results on Wednesday, after the US close, one day after this analysis. Financial figures below refer to the fiscal 2026 third quarter, ended the most recent reported period.

What Microsoft Has Actually Shipped

These developments are real but sequential, not a single launch. Microsoft Agent 365 reached general availability for commercial customers, priced at $15 per user per month standalone or bundled into Microsoft 365 E7. Microsoft describes it as a control plane to observe, govern and secure AI agents, including discovery of unmanaged local agents through Defender and Intune, registry synchronisation with AWS Bedrock and Google Cloud in public preview, and Entra network controls that block risky agent connections.

At Build, Microsoft moved the Agent 365 SDK and Windows 365 for Agents to general availability and expanded a preview of MDASH, a multi-model harness orchestrating more than 100 specialised AI agents to find and validate software vulnerabilities, which Microsoft says scored 96.55% on the CyberGym benchmark.

The most recent item is the Secure Future Initiative progress report published by Salim Chawro, corporate vice president of Microsoft Cloud Security. It reports phishing-resistant multifactor authentication covering 99.97% of user and device pairs, 1.4 million unused applications decommissioned, more than 550,000 critical and high-risk open-source vulnerabilities remediated, and roughly three million container vulnerabilities patched monthly. It accelerates Microsoft's post-quantum cryptography timeline, targeting critical products and services by 2029.

These are engineering disclosures, not commercial ones.

The March Quarter in Numbers

Revenue was $82.886 billion, up 18% as reported and 15% in constant currency. Microsoft Cloud revenue reached $54.5 billion, up 29% (25% constant currency), at a 66% gross margin, down year over year on AI infrastructure spend. By segment: Productivity and Business Processes $35.0 billion, up 17%; Intelligent Cloud $34.7 billion, up 30%; More Personal Computing $13.2 billion, down 1%. Azure and other cloud services grew 40% as reported, 39% in constant currency.

Operating income was $38.398 billion, up 20%, an operating margin of roughly 46.3%. GAAP net income was $31.778 billion and diluted EPS $4.27, each up 23%; non-GAAP net income was the same $31.8 billion, differing only on a constant-currency growth basis. Commercial remaining performance obligations stood at $627 billion, up 99%, with weighted average duration near 2.5 years; total RPO was $633 billion.

The 10-Q discloses approximately 27% ownership of OpenAI on an as-converted basis under the equity method, with funding commitments of $13 billion of which $11.8 billion was funded. Other income (expense), net included just $19 million of net losses from OpenAI in the quarter, but $5.9 billion of net gains across the nine months, driven mainly by a dilution gain from the October 2025 recapitalisation. That is a one-off accounting gain, not operating performance.

Where the Commercial Opportunity Sits

Microsoft 365 Copilot passed 20 million paid seats, up roughly 250% year over year, with organisations holding 50,000-plus seats quadrupling; Accenture alone was cited at 740,000 seats. Microsoft's overall AI business surpassed a $37 billion annual revenue run rate, up 123%. Security Copilot customers doubled year over year, data security triage agents handled more than two million unique alerts in the quarter, and Purview audited 35 billion Copilot interactions, up sevenfold, usage metrics, not revenue.

Every agent an enterprise deploys becomes an identity needing provisioning, a workload needing containment and a data path needing a policy. Microsoft is the incumbent identity provider for most large enterprises, making $15 per user per month a low-friction upsell. Whether that becomes a "massive" growth driver is unproven, the disclosure gap is itself the evidence.

The Competitive Field Has Consolidated

Rivals have scaled through M&A: Google completed its $32 billion acquisition of Wiz in March 2026, and Palo Alto Networks completed its CyberArk acquisition, paying $45.00 cash plus 2.2005 Palo Alto shares per CyberArk share, a move into identity security, Microsoft's home turf.

CrowdStrike is the clearest pure-play benchmark: for its fiscal 2027 first quarter ended it posted ending annual recurring revenue of $5.51 billion, up 24%, revenue of $1.39 billion, up 26%, GAAP diluted EPS of $0.11, non-GAAP diluted EPS of $1.10 and record free cash flow of $468.5 million.

Set against Microsoft's last disclosed $20 billion, the gap looks wide, but that figure dates from January 2023, and bundling means Microsoft's number reflects seats attached to E5 and now E7 suites rather than standalone wins. Bundling is also a regulatory exposure: the FTC's wide-ranging Microsoft investigation, ongoing without public enforcement action as of early 2026, is reported to touch licensing, cloud and bundling practices.

Capital Intensity Is the Real Constraint

Microsoft spent $30.876 billion on property and equipment in the March quarter against $46.679 billion of operating cash flow, free cash flow of roughly $15.8 billion, versus $47.3 billion across the nine months. CFO Amy Hood guided fourth-quarter capex above $40 billion and calendar 2026 capex to roughly $190 billion, including about $25 billion from elevated component costs, two-thirds directed at short-lived assets such as GPUs and CPUs.

The off-balance-sheet commitment is larger still: leases not yet commenced, primarily datacentres, totalled $196.6 billion, commencing between fiscal 2026 and fiscal 2031.

The balance sheet absorbs this comfortably: cash and equivalents of $32.1 billion plus short-term investments of $46.2 billion gave roughly $78.3 billion of liquidity, against total debt near $40.3 billion and stockholders' equity of $414.4 billion. Microsoft returned $10.2 billion to shareholders in the quarter.

What Could Go Right

The nearest catalyst is the 29 July report: guidance of $86.7-87.8 billion in revenue, against consensus near $87.7 billion and $4.24 EPS as summarised by GeekWire on 27 July. Hood guided fourth-quarter Azure growth of 39-40% in constant currency and flagged modest acceleration in the second half of calendar 2026. Longer term, Agent 365 attach rates, E7 migration and any first security disclosure would each reprice the thesis.

What Could Go Wrong

Disclosure: without a security revenue line, growth claims rest on inference. Capacity: Hood said Microsoft expects to remain constrained at least through 2026, capping Azure conversion of its $627 billion backlog. Capex return: free cash flow has compressed sharply, and Moody's notes that returns on industry-wide AI infrastructure spending are unclear. Concentration and regulation: commercial bookings fell 46% including OpenAI-related Azure commitments while rising 7% excluding them, one counterparty distorting the headline, and the FTC probe remains open.

Valuation Reflects Doubt, Not Euphoria

At $389.10, Microsoft traded on a trailing P/E of about 23.2 and a forward P/E near 21.0, with price-to-sales around 9.1 and enterprise value near $2.94 trillion, per aggregated market data. Trailing twelve-month free cash flow of $72.92 billion implies a free cash flow yield of roughly 2.5% on market capitalisation, thin by historical standards, a function of the capex cycle rather than deteriorating profitability. Sell-side consensus compiled from aggregated market data showed an average price target of $557.25; that is an aggregated analyst figure, not a Microsoft forecast, and individual targets were not independently verified.

Conclusion

Microsoft's agentic security build-out is substantive and strategically sensible, but commercially opaque. The thesis that security becomes Microsoft's next growth pillar is a reasonable hypothesis, not an established fact, untestable until the company breaks out security or updates the $20 billion figure it last gave in January 2023.

The nearer-term variable is the 29 July report, whether Azure acceleration and fiscal 2027 capex framing justify a multiple that has already de-rated. Security may well be a quiet compounder inside the Microsoft Cloud line; for now it is an argument built on product releases, not financial statements.

This article is for informational purposes only and does not constitute investment advice or a recommendation to buy, sell, or hold any security. Share prices can rise or fall, and past performance does not guarantee future results. Investors should conduct independent research and consult a licensed financial adviser before making investment decisions.