Access to this page requires authorization. You can try signing in or changing directories .
Access to this page requires authorization. You can try changing directories .
Codename MDASH is an agentic code scanner within Microsoft Defender that uses a multi-model agentic AI system to assist security and engineering teams detect and fix code vulnerabilities with unprecedented depth and accuracy.
This service uses a multistage agentic pipeline where specialized AI agents collaborate to find, validate, and prove vulnerabilities:
Prepare — The system ranks files by risk using call-graph analysis and code complexity metrics, prioritizing functions most likely to contain vulnerabilities.
Scan — More than 100 specialized AI agents (for example, injection-auditor, memory-safety-auditor, auth-bypass-auditor) analyze the ranked code using multiple LLMs. Each agent targets a specific vulnerability class.
Validate — The system uses taint analysis and type resolution through Language Server Protocol (LSP) servers. A multi-model agentic debate refines confidence and eliminates false positives.
Dedup — The system consolidates duplicate findings, producing a final set of unique, actionable vulnerabilities.
Key features & capabilities
Codename MDASH operates across codebases generically and supports all major programming languages. It has 100+ agents with different roles and expertise, and we tune it to deepen expertise across languages and environments. Codename MDASH is continually adding new agents and expertise to improve both detection and prioritization of findings. Currently, we've trained individual specially tuned expert agents with particularly deep expertise in languages such as C, C++, Java, and C#.
For prerequisites, see Set up agentic code security .
For permissions, see Security posture – AI code scan .
The following domains must be reachable from the machine or pipeline running the CLI.
Required for defender scan ai-scan
*.graph.microsoft.com
Required for GitHub Actions (OIDC)
*.token.actions.githubusercontent.com
Required for Azure Pipelines (OIDC)
Recommended for telemetry
*.in.applicationinsights.azure.com
*.dc.services.visualstudio.com
Cloud and region support
Codename MDASH - Agentic code scanner is available in the Azure commercial cloud in the following regions:
UAE (United Arab Emirates) UAE currently supports MDASH CLI scans only.
UAE currently supports MDASH CLI scans only.
Set up agentic code security
Set up Microsoft Foundry integration
Install and run Defender CLI
View results in the initiative
Was this page helpful?
Need help with this topic?
Want to try using Ask Learn to clarify or guide you through this topic?
Last updated on 2026-08-26
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
