Proofpoint, Inc., a global leader in human and agent cybersecurity, today announced new communications intelligence capabilities that help security, compliance, and legal teams investigate human and AI context behind potential insider risk. Proofpoint Prism Investigator now connects directly to Microsoft 365 for AI-driven investigations, while Proofpoint Human Communications Intelligence HCI agents incorporate AI communications governance signals into insider risk investigations. Announcement was made from Sunnyvale, California, on September 10, 2026.
In addition to analyzing content from Proofpoint Archive, Prism Investigator now connects to Microsoft 365, bringing AI-driven investigations to email, Teams messages, and files without requiring content to first reside in archive. Prism Investigator determines what investigation requires and retrieves relevant Microsoft 365 content as matter develops, reducing manual export and staging that can slow analysis. It can correlate those communications with archived content, data, logs, and other business records to piece together events and produce defensible case narrative. Result is faster path from investigation to understanding with auditability required for regulatory and legal matters.
"Security teams don't need another disconnected alert," said Harry Labana, SVP and general manager, Digital Communications Governance, Proofpoint. "While alert can indicate what happened, it's communications intelligence that can explain why. Like cockpit voice recorder, it gives investigators more than simple audio file, providing extensive details to piece together events and intent behind them. By extending intelligence across Microsoft 365 and interactions with AI, we're bringing same depth of context to security, compliance, and legal investigations."
Proofpoint is also extending HCI agents to incorporate AI communications governance signals into Proofpoint Insider Threat Management, bringing interactions with copilots, generative AI applications, and AI agents into context used to investigate potential insider risk.
Capturing what someone enters into AI tool can identify potential data exposure. Adding person's communications and behavior can reveal whether activity reflects routine use, policy violation, or potentially malicious intent. Proofpoint combines communications context with behavioral and data activity to help organizations better understand intent and determine appropriate response.
Generative AI, copilots, and AI agents increasingly embedded in how people work, and insider risk no longer limited to human activity alone. Prompts, responses, and interactions with AI systems becoming part of communications trail that can reveal intent and explain why event occurred.
Together, innovations expand Proofpoint communications intelligence into broader layer for understanding human and AI activity, integrated across unified platform.
Proofpoint HCI agents currently available as add-on to Proofpoint Capture powered by Nuclei. Proofpoint Prism Investigator connectivity to Microsoft 365 expected Q4 2026.
About Proofpoint
Proofpoint is global leader in human and agent cybersecurity, securing how people, data, and AI agents connect across email, cloud, and collaboration tools. Trusted partner to over 80 of Fortune 100, over 14,000 large enterprises, and millions of smaller organizations.
