Security
Microsoft Defender for Cloud
A cloud-native application protection platform that helps improve security posture and protect workloads across Azure, Amazon Web Services, Google Cloud, and hybrid environments.
Product
Microsoft Defender for CloudMicrosoft Defender for Cloud is a cloud-native application protection platform combining security posture management with workload protection. It helps identify cloud configuration risks, improve regulatory compliance, secure development practices, and protect workloads across Azure, Amazon Web Services, Google Cloud, and hybrid environments, with alerts and incidents integrated into the Microsoft Defender portal.
How it works
- Cloud environments and subscriptions are connected to establish asset visibility.
- Security posture assessments identify misconfigurations, exposed resources, excessive permissions, and other risks.
- Secure score and recommendations help teams prioritize improvements.
- Regulatory compliance views map resource status to supported standards and controls.
- DevOps security capabilities identify risks in code, repositories, pipelines, and infrastructure templates.
- Defender workload plans provide threat protection for supported servers, containers, databases, storage, APIs, and other resources.
- Alerts use workload telemetry and threat intelligence to identify suspicious activity and support investigation.
A problem it solves
A cloud storage resource is accidentally configured for public access, while a virtual machine shows behavior associated with credential theft. Microsoft Defender for Cloud identifies the posture weakness, recommends corrective action, detects the workload threat, and gives the security team the resource context for investigation.