---
sourceDocument: Australia Security Management
sourceDocumentLink: https://www.servicenow.com/docs/r/security-management

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia Security Management

ft:clusterId :

    - security

bundleId :

    - security

workflow :

    - Technology


---

# Microsoft Defender Integration for Security Exposure Management

# Microsoft Defender Integration for Security Exposure Management {#ariaid-title1}

* Release version: Australia
* 
* Updated July 29, 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read

The Microsoft Defender Integration for Security Exposure Management application is a unified integration point for importing security data from Microsoft TVM and Microsoft Defender for Cloud.

* The Microsoft Defender Integration for Security Exposure Management application replaces the standalone Microsoft Defender for Cloud Integration for Security Operations application.
* If you're upgrading from the standalone application, see [Migrate from the standalone Microsoft Defender for Cloud Integration to the Microsoft Defender Integration for Security Exposure Management](https://www.servicenow.com/docs/rbBO8tcbACizT8~Hnvs9QA "Migrate your existing data from the standalone Microsoft Defender for Cloud Integration application to the unified Microsoft Defender Integration for Security Exposure Management application.").

{#ms-defender-sem__ul_dpx_rdj_zjc}  
Note:  
The integrations support commercial cloud environments by default. If you require non-commercial support (GCC High, DoD, etc.), see the [Non-commercial configuration for Microsoft Defender Integration for Security Exposure Management](https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB3141167) Knowledge Base article \[KB3141167\] for more information.

The Microsoft Defender Integration for Security Exposure Management application bundles two independent integrations, each with its own configuration steps and distinct API URLs:

Microsoft Threat and Vulnerability Management (MS TVM)
:   Imports vulnerability data, security recommendations, and asset information. Use this data to prioritize and remediate vulnerabilities across your environment. For configuration instructions, see [Understanding the Microsoft Threat and Vulnerability Management Vulnerability integrations for Security Exposure Management](https://www.servicenow.com/docs/zidYOmc32tY4Sfp0ltHCtw "The Microsoft Threat and Vulnerability Management integrations are included with the Microsoft Defender Integration for Security Exposure Management application available with a subscription from the ServiceNow Store.") and [Install and configure the Microsoft TVM integrations for Security Exposure Management](https://www.servicenow.com/docs/_4JEVEZ2UqTxWFrzov1j_g "Install, activate, and configure the Microsoft TVM integrations for the Microsoft Defender Integration for Security Exposure Management with the Setup Assistant.").

Microsoft Defender for Cloud
:   Imports cloud resource misconfigurations, security assessment findings, compliance assessment data, and container image vulnerabilities. Use this data to manage your cloud security posture. For configuration instructions, see [Understanding the Microsoft Defender for Cloud integrations for Security Exposure Management](https://www.servicenow.com/docs/jU7BeWoduINzGBT6eWdW8A "The Microsoft Defender for Cloud integrations included with the Microsoft Defender Integration for Security Exposure Management application import cloud misconfiguration findings, compliance data, and container image vulnerabilities.") and [Install and configure Microsoft Defender for Cloud integrations for Security Exposure Management](https://www.servicenow.com/docs/gHlherunjUBbuF2PlA8IhQ "After you install and configure the Microsoft Defender Integration for Security Exposure Management, configure the Microsoft Defender for Cloud integrations.").

To view the integrations included with this application, navigate to AllMicrosoft Defender Integration for USEMAdministrationIntegrations.

*[\>]: and then