Microsoft Security Response Center (MSRC)

About Microsoft Security Response Center (MSRC)

The Microsoft Security Response Center (MSRC) Developer portal provides a Report Abuse Portal and a corresponding API for submitting reports of security incidents. It documents the incident types that can be reported through either channel, along with the threat types associated with each and a description of the underlying behavior.

Reportable incident types include Brute Force, Denial of Service, Malware, Phishing, Spam, and Illegal activity or rights violations, each tied to threat types such as IP address or URL. Portal-only categories cover Malicious Artifacts and Malicious or Inappropriate Text or URL distributed via Azure's Community Gallery, as well as Responsible AI reports concerning Microsoft's principles of reliability and safety, fairness, privacy and security, inclusiveness, and transparency and accountability.

This resource is intended for developers and organizations that need to programmatically or manually report abuse, security incidents, or policy violations to Microsoft, whether encountered through IP addresses, URLs, or content hosted in the Azure Community Gallery.

Key features

• Report Abuse Portal and API for submitting security incident reports
• Supports reporting Brute Force attacks (password spray, dictionary attacks)
• Supports reporting Denial of Service incidents
• Supports reporting Malware, Phishing, and malicious URLs
• Supports reporting Community Gallery abuse via Azure (malicious artifacts, inappropriate content)
• Supports reporting Responsible AI violations and Spam

Frequently asked questions