Cloud secure score (Preview) unable to see what impacted the tanking down & up of the score

Question

Cloud secure score (Preview) unable to see what impacted the tanking down & up of the score

Anonymous

In the Microsoft Defender portal, I can view the Cloud Secure Score (Preview) along with its associated recommendations. However, I am looking for more detailed historical insights—specifically, the ability to track why the score has increased or decreased over the past month.

For Secure Score, there is a history tab that provides visibility into score changes, including the specific actions or factors that contributed to increases or regressions. Is there a similar way to access this level of detail for Cloud Secure Score (Preview)?

Or is this functionality currently unavailable because the feature is still in preview and not yet fully released?

0 comments

2 answers

Your answer

Answer 1

Hello,

At this time, Cloud Secure Score (Preview) in the Microsoft Defender portal does not provide an equivalent to the Microsoft Secure Score history tab that explicitly explains each score increase or decrease with a per-change audit trail; instead, the preview experience is limited to high-level trend visualization and per-recommendation score history. You can see an aggregate secure score over time trend at the cloud initiative level and view historical score changes at the individual recommendation level under Exposure Management > Recommendations > Cloud, but there is no built-in view that correlates specific resource or recommendation changes to daily score movements in the way Secure Score does today. For deeper historical analysis today, Microsoft points customers to per-recommendation trends or external approaches such as continuous export to Log Analytics, but not to a native UI history tab in the portal.

Relevant https://learn.microsoft.com/en-us/azure/defender-for-cloud/secure-score-security-controls https://techcommunity.microsoft.com/blog/microsoftdefendercloudblog/continuously-export-secure-score-for-over-time-tracking-and-reporting-preview/1922779

Pauline Mbabu 1,840 Reputation points Microsoft Employee

2026-06-04T14:49:00.81+00:00

Hi,

This is a follow-up on the response above. If it helped answer your question, kindly mark it as Accepted Answer.

If you need more help, please share additional details in the comments.

Thanks!

Answer 2

For Cloud Secure Score (Preview) in the Microsoft Defender portal, there is currently no equivalent to the detailed “history” view that exists for Microsoft Secure Score (identity-focused) where each score change is broken down by specific actions or regressions.

What is available today for Cloud Secure Score is:

A “Secure score over time trend” chart on the cloud initiative overview page, which shows how the Cloud Secure Score changes over time at an aggregate level.
Score history and trend views at the recommendation level on the Exposure Management > Recommendations > Cloud tab, where each recommendation shows Cloud Secure Score, score history, and how risk is calculated.

However, the documentation does not describe any feature that:

Lists per-day (or per-change) events explaining exactly which recommendations/resources caused each increase or decrease in Cloud Secure Score, or
Provides a dedicated “history” tab for Cloud Secure Score comparable to the Microsoft Secure Score history experience.

So at this time, Cloud Secure Score (Preview) supports trend visualization and per-recommendation score history, but not a full, action-by-action score change audit like the Microsoft Secure Score history experience.

References: