PAGES
← all tools
◆ CNAPP

Microsoft Defender for Cloud

2026-07-30-311324fa commercial

Microsoft Defender for Cloud monitors and protects cloud infrastructure, applications, and data across Azure, AWS, and on-premises environments against threats.

Summary

Microsoft Defender for Cloud is a commercial cnapp service that runs as a cloud-native workload, requiring no agents to install on a laptop or server before it starts assessing risk. It extends its posture management to serverless containers, giving continuous assessment and visibility into workloads running on Azure Container Apps, Azure Container Instances, and AWS ECSAWS ECSAmazon's managed container orchestration service that runs Docker containers on clusters of EC2 instances or Fargate, letting tools offload scheduling, scaling, and infrastructure management to AWS. on Fargate, which matters for teams that have moved past VM-based workloads into container platforms they don't fully control. It is aimed at cloud security teams and platform engineers responsible for posture across mixed Azure and AWS estates rather than at developers debugging a single application. It sits in the cloud-native application protection category, covering ground that used to require separate posture and runtime tools stitched together.

Microsoft Defender for Cloud monitors and protects cloud infrastructure, applications, and data across Azure, AWS, and on-premises environments against threats.

How Microsoft Defender for Cloud helps

Which of my serverless container workloads have a posture problem I can't see because there's no host to install an agent on?

assesses Azure Container Apps, Azure Container Instances, and AWS ECS on Fargate continuously without requiring an agent, and reports the misconfigurations found

Which of my resources across Azure and AWS fall short of a security baseline?

evaluates configuration against posture recommendations across both clouds and lists the resources that fail, grouped by the check they failed

Is a running workload behaving in a way that suggests it's compromised?

correlates signals from the workload with threat intelligence and raises an alert naming the resource and the suspicious behavior observed

Where is my mixed-cloud estate exposed because a team stood up infrastructure outside normal review?

continuously discovers resources across Azure and AWS and folds them into posture assessment as they appear, rather than only at a scheduled scan

Which container platforms in my estate are outside VM-based protections I already rely on?

extends the same posture assessment used for VMs to serverless container services, closing the gap for workloads a team doesn't fully control the underlying host for

Have recent changes to my cloud environment introduced a risk that wasn't there before?

reassesses posture continuously rather than at a fixed interval, so a new gap shows up as it's introduced instead of at the next scheduled review

Release-note detail over time

See how much detail Microsoft Defender for Cloud puts in its release notes, quarter by quarter, and compare it with tracked tools in the same category. This history uses up to ten retained, reviewed notes per tool; sparse or blank older quarters may reflect that limit.

Checking release-note history…

Explore the full chart →

Commercials

pricing & packaging history · Microsoft vendor page

16 readings of Microsoft's pricing page since Mar 2022, with 3 relaunches of its plan lineup — each one dated, compared with the reading before it, and explained for someone buying the tool.

Pricing and packaging history is included with Researcher and Business. See how every vendor we track sells, and how that has changed over time, using data we don't publish anywhere else.

See plans →

Website history

microsoft.com, every change

Microsoft's home page and 40 more pages as they looked each month from October 2021 to October 2026: 1520 renders, 335 changes of tagline or palette. Step through them, play them, or put any two months side by side.

Website history is included with Researcher and Business.

See plans →

Releases

1 entry

  1. July 20261

    1 entry

    Integrates with

    Explore documented product relationships, workflows and source coverage. Documentary evidence does not confirm current support or your installation's fit.

    Provider productTarget productWorkflowEvidence
    Qualys Enterprise TruRisk Management (ETM) · Product without a Toolchain page Microsoft Defender for Cloud Import cloud assets, Import vulnerabilities and misconfigurations
    Data flows into the provider · Availability unknown
    Source 1
    not confirmed
    Tenable One Microsoft Defender for Cloud Import cloud assets, Import security recommendations
    Data flows into the provider · Availability unknown
    Source 1
    not confirmed
    Red Canary MDR for Zscaler · Product without a Toolchain page Microsoft Defender for Cloud cloud alert ingestion, alert investigation
    Data flows into the provider · Availability unknown
    Source 1
    not confirmed
    Rapid7 InsightIDR Microsoft Defender for Cloud alert ingestion
    Data flows into the provider · Availability unknown
    Source 1
    not confirmed

    Inspect all evidence, requirements, coverage and history

    Add the badge to your README

    Maintain this project? The badge links readers straight to this page, so they can follow every release here.

    Tracked by Cyber Toolchain Choose a badge style and copy the code →
    browse all tools → score card for your toolchain →