Microsoft Security Exposure Management
Vulnerabilities and exposureWhats New
In brief
Posture policies and recommendation exemptions are available in public preview for Azure environments. Administrators can evaluate Azure resources against the Microsoft Defender for Cloud baseline, create custom posture policies, and centrally manage accepted-risk exemptions with lifecycle tracking.
What Defender admins need to know
Administrators can use these capabilities to align posture evaluations with business, compliance, and operational requirements and manage exemptions at scale.
Summaries are generated from the documentation change itself.
Documentation change
View on Microsoft LearnThe comparison below shows only the changed extract. Use the full-page view for complete context.
October 2026
Posture policies and recommendation exemptions available for Azure environments
October 28, 2026
Posture policies and recommendation exemptions are now available in public preview as part of Microsoft Security Exposure Management for Azure environments.
With these new capabilities, you can:
- Gain visibility into your security posture through evaluations of Azure resources against the Microsoft Defender for Cloud baseline policy.
- Customize posture evaluations to align with your business, compliance, and operational requirements by creating and managing your own posture policies.
- Manage accepted risks at scale with centralized exemption management and lifecycle tracking.
For more information, see Manage posture policies and Manage exemptions.
Codename MDASH - MAI Cyber configuration now uses MAI-Cyber-1.1-Flash
The MAI Cyber (Preview) scan configuration now uses MAI-Cyber-1.1-Flash instead of MAI-Cyber-1-Flash.
@@ -13,7 +13,8 @@ feedback_product_url: https://techcommunity.microsoft.com/t5/security-compliance uhfHeaderId: MSDocsHeader-Security description: This page is updated frequently with the latest updates in Microsoft Security Exposure Management. ms.topic: overview-ms.date: 2026-06-30T00:00:00.0000000Z+ms.date: 2026-10-28T00:00:00.0000000Z+ms.custom: msecd-doc-authoring-1030 ai-usage: ai-assisted locale: en-us document_id: aed2aa1e-1cb3-37e5-da44-4b86bddfddf7@@ -57,6 +58,20 @@ Get notified when this page is updated by copying and pasting the following URL
## October 2026
+### Posture policies and recommendation exemptions available for Azure environments
+
+October 28, 2026
+
+Posture policies and recommendation exemptions are now available in public preview as part of Microsoft Security Exposure Management for Azure environments.
+
+With these new capabilities, you can:
+
+- Gain visibility into your security posture through evaluations of Azure resources against the Microsoft Defender for Cloud baseline policy.
+- Customize posture evaluations to align with your business, compliance, and operational requirements by creating and managing your own posture policies.
+- Manage accepted risks at scale with centralized exemption management and lifecycle tracking.
+
+For more information, see [Manage posture policies](manage-posture-policies-defender) and [Manage exemptions](manage-exemptions-defender).
+
### Codename MDASH - MAI Cyber configuration now uses MAI-Cyber-1.1-Flash
The MAI Cyber (Preview) scan configuration now uses MAI-Cyber-1.1-Flash instead of MAI-Cyber-1-Flash.