What security best practices must I comply with to publish my app to the Azure Marketplace?

Your solution must be packaged in accordance with Azure Marketplace security recommendations. It must also pass a scan for malware that we perform using a combination of proprietary and commercial vulnerability scanning tools.

Security best practices covered in our recommendations include:

  • No default account or password is used to access the app.
  • The app has no backdoor access (method for bypassing normal authentication).
  • The app has the latest security patches.

Publishers are expected to maintain up-to-date images.

Learn more by reviewing our Publisher Agreement and Participation Policies.

Related questions and answers

  • All APIs in the S1 tier are charged at a flat rate of $5 per 1,000 transactions. Learn more about Azure Maps pricing

  • You can change the configuration of your Azure Maps account at any time. For instructions on how to make changes in the Azure portal, please see the documentation on managing the pricing tier of your Azure Maps account.

  • Microsoft is committed to ensuring your privacy. When you sign up for Azure using GitHub, the profile information that’s requested is used to check for the presence of an existing Microsoft account and to create a new account if needed. Once your information enters the Microsoft ecosystem, it’s protected by our terms of service and we don’t share it without your permission. Connecting your GitHub identity to a Microsoft account will not give Microsoft access to your code.

  • You can manage the connection between your GitHub account and Microsoft account on the personal settings page under the Applications tab.

  • To sign up for an Azure free account, all you need is a phone number, a credit or debit card, and a GitHub account or Microsoft account username (formerly Windows Live ID). Create your Azure free account

  • With GitHub identity support, you can use your existing GitHub account in place of a Microsoft account on Azure and other Microsoft sites. Learn more