Microsoft Defender for Cloud

aid: microsoft-defender-for-cloud
name: Microsoft Defender for Cloud
description: Microsoft Defender for Cloud is Microsoft's unified cloud-native application protection platform (CNAPP) that
  delivers cloud security posture management (CSPM) and cloud workload protection (CWPP) across Azure, AWS, GCP, and hybrid/on-premises
  workloads. It provides security recommendations, secure score, regulatory compliance assessments, vulnerability management,
  and advanced threat protection for servers, containers, databases, storage, and more. The Defender for Cloud REST APIs are
  part of the Azure Resource Manager surface and authenticate via Azure Active Directory OAuth 2.0 tokens.
type: Index
deliveryModel:
  model: saas
  open_source: false
  commercial: true
  callable_host: true
  label: Hosted service · you call their endpoint
  confidence: high
  source:
  - openapi
  - pricing
  generated: '2026-08-28'
  method: derived
accessModel:
  pricing: unknown
  onboarding: self-serve
  trial: false
  try_now: false
  public: false
  label: Self-serve signup
  confidence: medium
  source:
  - authentication
  generated: '2026-07-22'
  method: derived
image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/icons/microsoft-defender-for-cloud.png
tags:
- Cloud Security
- CSPM
- CWPP
- CNAPP
- Threat Protection
- Compliance
- Vulnerability Management
- Azure
url: https://raw.githubusercontent.com/api-evangelist/microsoft-defender-for-cloud/refs/heads/main/apis.yml
created: '2026-05-11'
modified: '2026-05-11'
specificationVersion: '0.23'
apis:
- aid: microsoft-defender-for-cloud:rest-api
  name: Microsoft Defender for Cloud REST API
  description: Azure Resource Manager REST API for managing Defender for Cloud assessments, alerts, recommendations, secure
    score, regulatory compliance, pricing/plans, security contacts, and connectors for multi-cloud environments. Authentication
    is via Azure AD OAuth 2.0 bearer tokens against the management.azure.com endpoint with api-version query parameters.
  humanURL: https://learn.microsoft.com/en-us/rest/api/defenderforcloud/
  baseURL: https://management.azure.com
  tags:
  - Cloud Security
  - CSPM
  - CWPP
  - Azure Resource Manager
  - Threat Protection
  properties:
  - type: Documentation
    url: https://learn.microsoft.com/en-us/rest/api/defenderforcloud/
  - type: Operation Groups
    url: https://learn.microsoft.com/en-us/rest/api/defenderforcloud-composite/operation-groups
  - type: OpenAPI Specifications
    url: https://github.com/Azure/azure-rest-api-specs/tree/main/specification/security
  - type: Azure SDK
    url: https://learn.microsoft.com/en-us/azure/developer/
- aid: microsoft-defender-for-cloud:microsoft-defender-for-cloud-alerts-api
  name: Microsoft Defender for Cloud Alerts API
  description: Security alert operations
  humanURL: https://learn.microsoft.com/en-us/rest/api/defenderforcloud/
  baseURL: https://management.azure.com
  tags:
  - Alerts
  properties:
  - type: OpenAPI
    url: openapi/microsoft-defender-for-cloud-alerts-api-openapi.yml
- aid: microsoft-defender-for-cloud:microsoft-defender-for-cloud-assessments-api
  name: Microsoft Defender for Cloud Assessments API
  description: Security assessment operations
  humanURL: https://learn.microsoft.com/en-us/rest/api/defenderforcloud/
  baseURL: https://management.azure.com
  tags:
  - Assessments
  properties:
  - type: OpenAPI
    url: openapi/microsoft-defender-for-cloud-assessments-api-openapi.yml
- aid: microsoft-defender-for-cloud:microsoft-defender-for-cloud-pricings-api
  name: Microsoft Defender for Cloud Pricings API
  description: Defender plan/pricing operations
  humanURL: https://learn.microsoft.com/en-us/rest/api/defenderforcloud/
  baseURL: https://management.azure.com
  tags:
  - Pricings
  properties:
  - type: OpenAPI
    url: openapi/microsoft-defender-for-cloud-pricings-api-openapi.yml
- aid: microsoft-defender-for-cloud:microsoft-defender-for-cloud-securescores-api
  name: Microsoft Defender for Cloud SecureScores API
  description: Secure score operations
  humanURL: https://learn.microsoft.com/en-us/rest/api/defenderforcloud/
  baseURL: https://management.azure.com
  tags:
  - SecureScores
  properties:
  - type: OpenAPI
    url: openapi/microsoft-defender-for-cloud-securescores-api-openapi.yml
common:
- type: AgenticAccess
  url: agentic-access/microsoft-defender-for-cloud-agentic-access.yml
- type: VulnerabilityDisclosure
  url: security/microsoft-defender-for-cloud-vulnerability-disclosure.yml
- type: DomainSecurity
  url: security/microsoft-defender-for-cloud-domain-security.yml
- type: Authentication
  url: authentication/microsoft-defender-for-cloud-authentication.yml
- type: OAuthScopes
  url: scopes/microsoft-defender-for-cloud-scopes.yml
- type: Website
  url: https://azure.microsoft.com/en-us/products/defender-for-cloud
- type: Documentation
  url: https://learn.microsoft.com/en-us/azure/defender-for-cloud/
- type: REST API Documentation
  url: https://learn.microsoft.com/en-us/rest/api/defenderforcloud/
- type: Pricing
  url: https://azure.microsoft.com/en-us/pricing/details/defender-for-cloud/
- type: Signup
  url: https://azure.microsoft.com/en-us/free/
- type: GitHub OpenAPI Specs
  url: https://github.com/Azure/azure-rest-api-specs/tree/main/specification/security
- type: LlmsText
  url: https://azure.microsoft.com/llms.txt
- url: https://www.microsoft.com/en-us/security/blog/product/microsoft-defender-for-cloud/feed/
  type: Blog
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com