GET THE LATEST
Get your first look at new solutions from Microsoft Security at Ignite
Learn how to protect your organization from emerging threats, reduce risks across all your environments, and secure and govern AI using the latest solutions
Overview
Comprehensive exposure management
- Empower your organization with a comprehensive view of assets and end-to-end visibility of your attack surface.
- Aggregate your data and apply threat intelligence to proactively discover security gaps and cyberattack paths that could expose your critical assets.
- Rapidly identify vulnerable assets and get tailored recommendations to improve your security posture and minimize cyberthreat exposure.
Scenarios
Continuous threat exposure management
Evolve from reactive vulnerability hunting and siloed security management. Prioritize risk management by building a CTEM program that continuously helps you stay ahead of cyberthreats.
Enable teams to focus on key initiatives and programs
Know your attack surface and critical assets
Understand threat level and available security controls
Identify cyberattack paths and analyze potential impact
Focus remediation on reducing risk to critical assets
Product integrations
Unified SecOps
Help prevent, detect, and respond to cyberattacks with Exposure Management and security operations (SecOps) in one AI-powered platform.
Microsoft Defender for Cloud
Help prioritize protecting critical assets in multicloud and hybrid environments with Defender for Cloud, which uses automatic critical asset tagging from Exposure Management.
Microsoft Defender Vulnerability Management
Enable teams to discover and remediate critical vulnerabilities, maximizing security efforts and limiting exposure of critical assets. Defender Vulnerability Management now also evaluates Exposure Management insights to visualize and analyze risks in the context of your organization.
Microsoft Defender Threat Intelligence
Unmask adversaries and neutralize modern cyberthreats with Exposure Management and Defender Threat Intelligence. Find out your threat exposure to adversaries and attack techniques and how to improve your security posture.
Unify exposure data from your security tools
Strengthen your security posture and reduce your exposure with unified end-to-end visibility into assets, cyberattack paths, and cyberthreats. Exposure Management is natively connected to Microsoft Security tools and has connectors to non-Microsoft security tools.
Resources
Documentation and learning
Frequently asked questions
- Microsoft Security Exposure Management unifies disparate data silos, providing security teams with end-to-end visibility of their organization’s security posture. It enables them to understand and improve their security posture and manage exposure across devices, identities, apps, data, and multicloud and hybrid infrastructure.
- Yes, Microsoft Secure Score is part of Exposure Management. It’s one of the metrics customers can choose to track and operate by. Exposure Management introduces a new feature, Security Initiatives, which provides protection level as a score scoped to specific security domains, cyberthreat actors, and cyberattack patterns and techniques.
- You’ll find Microsoft Security Exposure Management in the Microsoft Defender portal.
- Exposure Management is available in the Microsoft Defender portal at https://security.microsoft.com
Access to the exposure management blade and features in the Microsoft Defender portal is available with any of these licenses:- Microsoft 365 E5 or A5
- Microsoft 365 E3
- Microsoft 365 E3 with the Microsoft Enterprise Mobility + Security E5 add-on
- Microsoft 365 A3 with the Microsoft 365 A5 security add-on
- Microsoft Enterprise Mobility + Security E5 or A5
- Microsoft Defender for Endpoint (Plan 1 and 2)
- Microsoft Defender for Identity
- Microsoft Defender for Cloud Apps
- Microsoft Defender for Office 365 (Plans 1 and 2)
- Microsoft Defender Vulnerability Management
For more information, see the Microsoft 365 Enterprise service plans
Integration of data from the above tools and other Microsoft Security tools like Microsoft Defender for Cloud, Microsoft Defender Cloud Security Posture Management and Microsoft Defender External Attack Surface Management is available with those licenses.
Integration of non-Microsoft security tools will be a consumption based cost based on number of assets in the connected security tool. The external connectors are in public preview and pricing will be announced before billing of external connectors reaches general availability. - No, Exposure Management consolidates security posture and exposure-related data from Microsoft Security tools that you own and use. Learn more.
- No, Exposure Management provides connectors to other security tools. Learn more and get the current list of connectors.
Follow Microsoft Security