Find agents that answer from public websites

Last updated Oct 21, 2026 Policies

AI summary

Find Copilot Studio agents using public websites as knowledge sources so you can identify which responses depend on content outside your control. Create policies from templates in Rencore Governance to flag these agents, then share violations with their owners or automate email notifications. Once public website content is removed, the agent no longer appears in policy violations after the next scan.

Find the agents that use public websites as a knowledge source, so you know which answers depend on content you do not control.

Before you begin

Your Rencore role needs the permissions to create policies. See Rencore roles.
Copilot Studio is connected. Rencore Governance reads agent knowledge from Dataverse, so the Dataverse setup and consent are required. See Dataverse and Copilot Studio.
Copilot and Copilot Studio are part of the AI & Agents module. See Add-ons.

Steps

Flag the agents

To find agents with public web knowledge, you will need to:

Click Policies on the Nav Panel.
Select Policy Options ([…]) > Create Policy.
In the “Policy Template Library”, choose one of these templates:
- External Web Content Dependency Risk: Copilot Studio agents that use public websites as knowledge sources
- External Website Data Source Risk: external connections that load website data into Microsoft 365 Copilot
- Missing External Connection Documentation: external connections without a description
Check the logic, set the severity, and save. See Create a Policy from a Template.
To check the knowledge of one agent, open the Copilot Studio object “Knowledge” in the inventory. See the Copilot Studio inventory reference.

These templates flag other agents that need a closer look:

What you see

Each violation names the agent and its Environment. Send the list to the agent owners, or Create a Custom Automation that emails them on every violation. Once the public website is removed from the agent, the agent leaves the policy after the next scan.

Limits

Rencore Governance finds and flags these agents. It cannot unpublish or pause an agent, and it has no structured review of agents.
Agents built in Agent Builder, SharePoint agents and declarative agents are not checked by these templates.

Frequently asked questions

How do I find Copilot Studio agents that use public websites as a knowledge source?

Click Policies on the Nav Panel, select Policy Options ([...]) > Create Policy, and choose the External Web Content Dependency Risk template from the Policy Template Library. Then check the logic, set the severity, and save.

What do I need in place before I can flag agents with public web knowledge?

Your Rencore role needs the permissions to create policies, and Copilot Studio must be connected. Rencore Governance reads agent knowledge from Dataverse, so the Dataverse setup and consent are required. Copilot and Copilot Studio are part of the AI & Agents module.

Can Rencore Governance unpublish or pause an agent that uses a public website?

No. Rencore Governance finds and flags these agents, but it cannot unpublish or pause an agent, and it has no structured review of agents.

Which types of agents are not checked by the public website templates?

Agents built in Agent Builder, SharePoint agents and declarative agents are not checked by these templates.

What happens to a flagged agent after the public website is removed from it?

The agent leaves the policy after the next scan. Each violation names the agent and its Environment, and you can send the list to the agent owners or create a Custom Automation that emails them on every violation.

Was this page helpful?