Cloud security reporting in Microsoft Defender portal (Preview)

Cloud security reporting in Microsoft Defender portal (Preview)
May 20, 2026

Microsoft Defender portal now includes integrated cloud security reporting capabilities, enabling you to create, customize, and share security insights across your organization.

With cloud security reporting, you can:

• View built-in reports such as CNAPP Executive Summary and Cloud Posture that provide predefined views of cloud security data
• Customize existing reports by duplicating and modifying sections, cards, and layout to match your specific needs
• Create custom reports from scratch by defining sections and selecting relevant cards
• Export reports to PDF for sharing with stakeholders and leadership
• Control report access using visibility settings (Private, Tenant-level access, or Public)
• Filter and organize reports by type and visibility

The CNAPP Executive Summary report provides a consolidated view of cloud-native application protection platform signals, including threat detection, secure score trends, vulnerability management, security recommendations, investigation & response activity, and regulatory compliance status.

The Cloud Posture report offers a centralized view of your overall cloud security posture, helping you assess security risk, track progress over time, and prioritize remediation efforts across environments and workloads.

To access cloud security reports, navigate to the Reporting page in the Microsoft Defender portal and select the Cloud tab.

Scanning support for Docker Hardened container images
May 19, 2026

Microsoft Defender for Cloud's vulnerability scanner, powered by Microsoft Defender Vulnerability Management, is extending its scanning coverage to Docker Hardened container images, and identify vulnerabilities in Docker Images to validate that they're shipping the most secure builds possible. As additional image types are being scanned, your bill might increase. The rollout of this change will occur gradually over several weeks and requires no user action.

Microsoft Defender Experts for Servers as a managed XDR option
May 18, 2026

Defender for Cloud is now partnered with Microsoft Defender Experts, as a managed extended detection and response (XDR) service for server workloads.

Microsoft analysts and automation work together to detect, prioritize, and respond to threats on machines protected by Defender for Servers Plan 1 or Plan 2 across Azure, Amazon Web Services (AWS), Google Cloud Platform (GCP), and on-premises environments. Defender Experts for Servers is sold separately and includes Defender Experts for Hunting and Ask Defender Experts.