Overview - AI threat protection

Microsoft Defender for Cloud's threat protection for AI workloads identifies threats to generative AI applications in real time and helps respond to security issues.

Important

Threat protection for AI workloads is currently in preview. See the Supplemental Terms of Use for Microsoft Azure Previews for legal terms that apply to Azure features that are in beta, preview, or otherwise not yet released into general availability.

Defender for Cloud's AI threat protection works with Azure AI Content Safety Prompt Shields and Microsoft's threat intelligence to provide security alerts for threats like data leakage, data poisoning, jailbreak, and credential theft.

Defender XDR integration

Threat protection for AI workloads integrates with the Defender XDR, allowing security teams to centralize AI workload alerts in the Defender XDR portal.

Security teams can correlate AI workload alerts and incidents in the Defender XDR portal to understand the full scope of an attack, including malicious activities related to their generative AI applications.

Availability

Aspect	Details
Release state:	Public Preview (PP)
Feature availability:	- Activity monitoring (security alerts) – Preview (PP) - Prompt evidence (security alerts) – Preview (PP)
Pricing:	N/A
Supported AI services:	Azure OpenAI supported models Azure AI Model Inference service supported models **Defender for cloud supports text tokens only at this phase (image and audio tokens are not scanned)
Required roles and permissions:	To enable threat detection at subscription level, you need Owner roles (subscription owner) or specific roles with corresponding data actions.
Clouds:	Commercial clouds Commercial clouds Azure Government Commercial clouds Azure Government Microsoft Azure operated by 21Vianet Commercial clouds Azure Government Microsoft Azure operated by 21Vianet Connected AWS accounts

Related content

• Enable threat protection for AI workloads (preview).
• Alerts for AI workloads