Microsoft Deploys Codename MDASH to Azure Government
Microsoft says its multi-model agentic scanning system, codename MDASH, has deployed to Microsoft Azure Government, with preview access available to select US government customers and authorized partners. It arrives as a feature of Microsoft Defender and works with models inside the FedRAMP High-authorized Microsoft Foundry service.
Transcript
Microsoft deployed its agentic AI vulnerability scanner to the US government cloud today.
Microsoft says MDASH is now in Azure Government as a Defender feature, with preview access for select government customers and partners.
Microsoft says more than one hundred AI agents each look for a different weakness category. A second group argues whether each flaw is genuinely reachable.
Microsoft reports ninety six point five five on the CyberGym benchmark. Azure Government is a separate isolated cloud with FedRAMP High authorization.
Microsoft warns a system able to find a vulnerability could help an attacker find one. These are Microsoft's descriptions, and access is preview only.
Inboxsmith builds AI phone and email agents for small business. Please like and subscribe for more news.
Sources
Every claim in this video comes from the top ranking coverage of this topic. The claims and where each one came from:
- The announcement states: "Microsoft's multi-model agentic scanning system (codename MDASH), designed specifically for finding security flaws in software, has deployed to Microsoft Azure Government and with preview access available to select US government customers and authorized partners." The word "Today" opens the same paragraph, dating the deployment to September 8, 2026.(Microsoft's official announcement, "Codename MDASH brings agentic AI security scanning to US government", published September 8, 2026)
- "Codename MDASH is available in Azure Government as a feature of Microsoft Defender that works with models available within the FedRAMP High-authorized Microsoft Foundry service."(Microsoft's official announcement, "Codename MDASH brings agentic AI security scanning to US government", published September 8, 2026)
- "Codename MDASH works by putting more than 100 specialized AI agents, leveraging a variety of models, to work on the same body of code, each trained to recognize a different category of weakness."(Microsoft's official announcement, "Codename MDASH brings agentic AI security scanning to US government", published September 8, 2026)
- "Their findings are then handed to a second group of agents whose job is to argue the case, for and against, whether each suspected flaw is genuinely reachable and genuinely dangerous."(Microsoft's official announcement, "Codename MDASH brings agentic AI security scanning to US government", published September 8, 2026)
- "This multi-model, multi-step agentic approach is the key factor in how codename MDASH scored a 96.55 on the public CyberGym benchmark of real-world vulnerabilities and has produced similar results on first-party code validated against Microsoft's historical vulnerability cases." The score is reported by Microsoft; no independent verification is cited.(Microsoft's official announcement, "Codename MDASH brings agentic AI security scanning to US government", published September 8, 2026)
- "Azure Government provides a separate, isolated cloud operated by screened US persons and built to meet the compliance obligations that federal, national security, and state and local government customers carry, including FedRAMP High authorization and Department of War accreditation for controlled and mission-critical workloads." The article adds that this "allows an agency's source code and everything the system learns about it to remain within a boundary already approved for handling of that data."(Microsoft's official announcement, "Codename MDASH brings agentic AI security scanning to US government", published September 8, 2026)
- Under the heading "A warning worth heeding": "An AI system capable enough to find a vulnerability in a defender's software is capable enough to help a threat actor find one to exploit."(Microsoft's official announcement, "Codename MDASH brings agentic AI security scanning to US government", published September 8, 2026)
- Honesty caveat: every capability, benchmark number, and security claim in this script comes only from Microsoft's own blog post, authored by Douglas Phillips, President and Chief Technology Officer, Microsoft Specialized Clouds. No independent testing or third-party evaluation of codename MDASH is cited anywhere in the article. The article describes availability as "preview access available to select US government customers and authorized partners", not general availability, and directs readers to "contact your Microsoft account team about MDASH in Azure Government" for access.(Microsoft's official announcement, "Codename MDASH brings agentic AI security scanning to US government", published September 8, 2026)