Edit

Share via


Security agent (preview)

[This article is prerelease documentation and is subject to change.]

Security agent in Power Pages is an AI-powered feature built into the Power Pages design studio. The security agent helps makers proactively secure their websites with minimal manual effort. The Security agent works in the background to scan your website for common vulnerabilities, monitor live traffic patterns for anomalies, and guide you through resolving issues as they arise.

Whether you are new to web security or a seasoned admin, the security agent simplifies how you protect your external-facing sites with built-in intelligence, guided fixes, and real-time alerts, all without leaving the studio.

Important

  • This is a preview feature.
  • Preview features aren’t meant for production use and might have restricted functionality. These features are subject to supplemental terms of use, and are available before an official release so that customers can get early access and provide feedback.

Capabilities

As part of the public preview, the security agent offers two primary capabilities to help makers secure their Power Pages sites:

  • Automated security scan
    Every two weeks, the agent runs a scheduled scan using the OWASP ZAP engine to detect common vulnerabilities across 37 predefined security rules. These include misconfigured headers, XSS risks, and exposed server information. When issues are found, the agent generates alerts and presents guided mitigation workflows to help makers resolve them.

  • Site traffic monitoring
    The agent monitors live traffic using Microsoft Sentinel signals and historical traffic data. When it detects suspicious spikes or clustered activity, it generates alerts and presents mitigation workflows.

Some recommendations are AI-generated, especially for complex issues like correcting CSP configurations or suggesting custom WAF rules. Others follow standard rule-based logic for known security best practices.

How does it work?

The security agent is designed to work behind the scenes while keeping makers fully in control. Here’s how the end-to-end flow works:

1. Configure the security agent

From the Power Pages design studio, go to the security workspace and choose the Security Agent tab:

  • Choose which capabilities to enable, such as automated scanning or traffic monitoring. Screenshot of the security agent configuration tab in Power Pages design studio.

  • Select how to receive alerts, using in-product notifications, email, or Microsoft Teams. Screenshot of security agent configuration options in Power Pages showing details of site traffic.

This setup ensures the agent runs only what’s needed and notifies makers through their preferred channel.

2. Detect vulnerabilities or anomalies

Once enabled, the security agent runs the following actions:

  • Automated scans run every two weeks using the ZAP engine and check against 37 OWASP-based rules.

  • Traffic monitoring runs continuously using Microsoft Sentinel signals and historical traffic patterns.

When issues are found, alerts are triggered automatically.

3. View and respond to alerts

All alerts appear in the Overview screen. For each alert:

  • A guided fix flow is provided.

  • Makers are shown one or more recommended actions based on the issue type.

    Screenshot of Security agent alert overview and guided fix flow in Power Pages.

4. Apply fixes directly in the studio

You can perform the following actions based on the findings:

  • Review plain-language explanations for each recommendation.

  • Accept or edit suggested values.

  • Take actions directly, through one-click settings, embedded VS Code, or external documentation links.

Each fix applied updates the alert status and helps keep the site secure.