Cloud security

Get rich visibility into your shadow IT, identify and remediate cloud-native attacks, and control how your data travels across all your cloud apps, whether they’re Microsoft apps or other apps.

Identify and control access to cloud apps and services used by your organization. Assess the risk level and business readiness of more than 16,000 apps and start managing them to ensure security and compliance.

Detect unusual behavior across cloud apps to identify ransomware, compromised users, or rogue apps. Analyze high-risk usage and remediate automatically to limit the risk to your organization.

Leverage our adaptive access control to enable powerful use cases that help prevent data infiltration and exfiltration during risky user sessions across any app in your organization—all in real time.

Continuously assess the security state of your cloud resources across virtual machines, networks, apps, and data services. Monitor server workloads running in other clouds and in on-premises datacenters. Quickly get insights with visualization of the security state—all within Azure Security Center.

Improve your security posture and prevent common misconfigurations. Azure Secure Score is the core of the Azure Security Center security posture management capabilities. Get insights into your current state along with recommended actions to prioritize the steps you can take to improve your security posture.

Manage and enforce your security policies and make sure your virtual machines and Azure PaaS services are compliant. Set your policies to run on management groups, across subscriptions, and even for a whole tenant.

Easily deploy and configure Security Center on large-scale environments using policies and automation. Use AI and automation to quickly identify threats, improve threat investigation, and help automate remediation. Streamline threat mitigation by connecting to existing tools such as Azure Sentinel, the SIEM solution from Microsoft, or by integrating partner security solutions.

Safeguard your virtual machines, data, cloud-native services, and IoT against common threats such as brute-force password attacks, SQL injection attacks, and threats against containers.

Understand the security state of your hybrid cloud workloads in one console. Extend coverage to workloads outside Azure with Azure Arc.

Streamline threat investigation with AI and advanced automation. Protect users, devices, and apps by leveraging integration with Microsoft Defender. Bring all your security analytics together into one unified view with Azure Sentinel.

Get all the tools you need to secure your app with GitHub and Azure—all fully integrated into the platform, whether you use Microsoft or open-source tools. Start with threat modeling to identify potential threats and perform static and dynamic code analysis to find vulnerabilities.

Use Dependabot to scan dependencies from other libraries or components, including open source, for vulnerabilities and the latest updates. Ensure your secrets, such as connection strings and keys, are stored securely in repositories backed by hardware security modules, not embedded in your code.

Enable multifactor authentication to protect identity and use a firewall to protect the network. Protect data with encryption at rest and in transit. Strengthen data encryption through the confidential computing family of virtual machines in Azure.

Access current Azure Security Center best practices for securing apps so you know exactly what steps we recommend and implement with the same toolkit we use to secure our own apps.