Microsoft Defender for Cloud
Cloud and workloads

Cloud security reporting in Microsoft Defender portal

In brief

The article now organizes reporting capabilities, describes report sections more clearly, expands CNAPP, and documents environment requirements and report visibility options.

What Defender admins need to know

Administrators can use the revised guidance to identify supported environments and review available report visibility settings.

Summaries are generated from the documentation change itself.

Documentation change

The comparison below shows only the changed extract. Use the full-page view for complete context.

Cloud security reporting in Microsoft Defender portal

Microsoft Defender portal provides integrated reporting capabilities for cloud security data, enabling you to create, customize, and share security insights across your organization.

You can view built-in reports, create custom reports tailored to your needs, and export reports to PDF for sharing with stakeholders. These capabilitiesBuilt-in reports, custom reports, and PDF export enable you to generate and manage reports based on Cloudcloud security data and tailor them to your organization's needs.

CapabilitiesCloud security reporting capabilities

Cloud security reporting enables you to:

Environment requirements

The following environment requirement must be met:

  • A Microsoft Defender for Cloud paid plan is enabled

Required roles and permissions

Supported cloud environments

Cloud security reporting is available in the following cloud environments:

  • Available in commercial clouds (Azure, AWS, and GCP)
  • Not available in sovereign clouds

To access cloud reporting:

  1. Go to the Reporting page in the Microsoft Defender portal. .
  2. Select the Cloud tab.

:::image type="content" source="media/cloud-security-reporting/reports-cloud.png" alt-text="Screenshot of Microsoft Defender Reports page with the Cloud tab selected, showing Unified security summary and Query resources reports." lightbox="media/cloud-security-reporting/reports-cloud.png":::

Overview

ProvidesThe Overview section provides a high-level snapshot of key security indicators across your cloud environment.

:::image type="content" source="media/cloud-security-reporting/executive-summary-report.png" alt-text="Screenshot of CNAPP Executive summary showing threat detection, cloud secure score, and security coverage cards with view buttons." lightbox="media/cloud-security-reporting/executive-summary-report.png":::

Secure score

ShowsThis section shows how the cloud secure score changes over time, with breakdowns that help identify areas with higher risk or slower improvement.

Vulnerability management

ProvidesThis section provides insights into vulnerability exposure and remediation across your cloud environments.

Security recommendations

DisplaysThis section displays detected security recommendations across the environment, highlighting configuration gaps and best practice deviations that can be remediated to reduce risk.

Investigation & response

SummarizesThis section summarizes detection and response activity across your environment.

Regulatory compliance

ShowsThis section shows compliance posture across supported regulatory frameworks, highlighting non-compliant standards and areas that require attention.

When to use this report

Use the CNAPP (cloud-native application protection platform) Executive summary report when you need to:

  • Get a quick, executive-level view of overall cloud security risk
  • Monitor trends in secure score, vulnerabilities, and alerts over time

Overview

SummarizesThis section summarizes the current security posture, including the cloud secure score and Defender CSPM plan coverage across your environments.

:::image type="content" source="media/cloud-security-reporting/cloud-posture-report.png" alt-text="Screenshot of Cloud posture report showing cloud secure score, Defender CSPM plan coverage, and security posture trends over time." lightbox="media/cloud-security-reporting/cloud-posture-report.png":::

Security posture

ShowsThis section shows how the cloud secure score evolves over time, with breakdowns by environment and workload to help identify areas with higher risk exposure.

Recommendations

HighlightsThis section highlights actionable security recommendations and remediation status to help prioritize remediation efforts based on impact.

Regulatory compliance

DisplaysThis section displays compliance posture against supported regulatory standards and frameworks, helping identify compliance gaps and track progress toward regulatory requirements.

When to use this report

Report visibility controls who can access each report in your organization.

VisibilityReview report visibility options

The following visibility options are available for reports:

  • Private: Only you can view this report.
  • Tenant-level access: Users who have permission to view data across the entire tenant can view this report.