What product should I use for Application Security in Azure?

Huy Tran 1 Reputation point
2022-09-20T16:57:42.457+00:00

I am trying to figure out what prouduct or if a product exists that would use for application security in Azure. I would define application security as developing, adding, and testing security features within applications to prevent security vulnerabilities against threats such as unauthorized access and modification.

Microsoft Defender for Cloud
Microsoft Defender for Cloud
An Azure service that provides threat protection for workloads running in Azure, on-premises, and in other clouds. Previously known as Azure Security Center and Azure Defender.
1,215 questions
0 comments No comments
{count} votes

2 answers

Sort by: Most helpful
  1. JimmySalian-2011 41,926 Reputation points
    2022-09-20T17:10:12.087+00:00

    HI,

    Not sure if which application you are looking for there are many best practices and articles that can assist you design and select the options that fit your requirements and goal.

    SSO, MFA, RBAC, Secure Access Controls, Defender for Cloud, Conditional Access Policies are critical for Azure and Apps that you want to protect and these are starting points.

    technical-capabilities

    Here is the link and best-practices-and-patterns

    ==
    Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

    0 comments No comments

  2. JamesTran-MSFT 36,481 Reputation points Microsoft Employee
    2022-09-21T21:18:38.94+00:00

    @Huy Tran
    Thank you for your post!

    When it comes to a specific product that could monitor your Azure applications and resources to determine if it's secure or not, we do have Microsoft Defender for Cloud which will continually assess, secure, and defend your workloads in real-time so you can react immediately and prevent security events from developing.

    243632-image.png

    Additionally, you can leverage Microsoft Sentinel to:

    • Collect data at cloud scale across all users, devices, applications, and infrastructure, both on-premises and in multiple clouds.
    • Detect previously undetected threats and minimize false positives using Microsoft's analytics and unparalleled threat intelligence.
    • Investigate threats with artificial intelligence, and hunt for suspicious activities at scale, tapping into years of cyber security work at Microsoft.
    • Respond to incidents rapidly with built-in orchestration and automation of common tasks.

    243603-image.png

    Additional Links:
    Quickstart: Set up Microsoft Defender for Cloud
    Quickstart: Onboard Microsoft Sentinel
    Microsoft Defender for Cloud - Planning and operations guide
    Tutorial: Protect your resources with Microsoft Defender for Cloud
    FAQ - General questions about Microsoft Defender for Cloud

    If this isn't what you're looking for, can you share what specific application (Web Apps, App Registrations, Mobile Apps, etc.) you're referring to, and what you're trying to do?

    I hope this helps!

    If you have any other questions, please let me know.
    Thank you for your time and patience throughout this issue.

    ----------

    Please remember to "Accept Answer" if any answer/reply helped, so that others in the community facing similar issues can easily find the solution.