Azure Defender should be enabled for App Services


Azure Defender for App Services identifies attacks targeting web applications running over an App Service. Attackers probe web applications looking to exploit vulnerabilities or weaknesses.

Remediation Steps

Azure Portal

  • Navigate to Security Center.

  • In the left navigation, select Pricing & Settings.

  • Select the Subscription Name.

  • In the left navigation, select Azure Defender plans.

  • Verify that Azure Defender is on.

  • In the table under App Service, select On.

  • Click Save.

Azure CLI

Remediation is not possible via the CLI.