poc of security scanning tools-veracode,qualys for web apps hosted in azure

Kumar, Saluja 1

We want to perform Proof-of-concept on Web Application Vulnerability scanning tools -veracode to web apps hosted at azure.is there any specific requirement from microsoft to perform it.Any help or if anyone have performed.

1 answer

ajkuma 25,781 Reputation points Microsoft Employee

2020-08-27T14:26:25.467+00:00

Thanks for posting a good question!

Apologies for the delay.

If I understand your question correctly. While notifying Microsoft of pen testing activities is no longer required users must still comply with the Microsoft Cloud Unified Penetration Testing Rules of Engagement.

You may refer this document from Qualys which outlines detailed information about the requirement/POC.
Note: This post contains a third-party site for your reference & convenience to you only and is not controlled by Microsoft.

You can use this reference guide if your Website is hosted on Azure App Service with Security Center

If you have any further questions, please let us know we would be happy to assist you.
Please sign in to rate this answer.
ajkuma 25,781 Reputation points Microsoft Employee

2020-08-27T14:31:30.683+00:00

Just highlighting the following information as additional information, you may wish to know:

Secure DevOps Kit for Azure (AzSK) contains SVTs for multiple services of the Azure platform. You run these SVTs periodically to ensure that your Azure subscription and the different resources that comprise your application are in a secure state. You can also automate these tests by using the continuous integration/continuous deployment (CI/CD) extensions feature of AzSK, which makes SVTs available as a Visual Studio extension.

Microsoft Security Risk Detection is a cloud-based tool that you can use to look for bugs and other security vulnerabilities in your software before you deploy it to Azure.

ajkuma 25,781 Reputation points Microsoft Employee

2020-08-27T14:36:56.927+00:00

Kindly check this document for more details:

Develop secure applications on Azure - https://video2.skills-academy.com/azure/security/develop/secure-develop#perform-security-penetration-testing

Penetration testing -https://video2.skills-academy.com/azure/security/fundamentals/pen-testing
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

poc of security scanning tools-veracode,qualys for web apps hosted in azure

1 answer

Your answer