# Ensure That Microsoft Defender for Open-Source Relational Databases Is Set To 'On'

- Source: https://support.icompaas.com/support/solutions/articles/62000229840-ensure-that-microsoft-defender-for-open-source-relational-databases-is-set-to-on-
- Section: [Solutions](https://support.icompaas.com/support/solutions) › [General](https://support.icompaas.com/support/solutions/62000037933) › [Azure Compliance / Control / Check](https://support.icompaas.com/support/solutions/folders/62000168797)
- Last updated: 2026-05-29
- Publisher: iCompaas, Inc. (https://www.icompaas.com)

Description:

Microsoft Defender for Open-Source Relational Databases is a security feature within Microsoft Defender for Cloud that provides advanced threat protection for open-source relational database services, including MySQL, PostgreSQL, and MariaDB hosted in Azure.

Turning this feature on ensures that your open-source database environments are proactively protected, continuously monitored, and aligned with security best practices.

  

Rationale:

By enabling Microsoft Defender for Open-Source Relational Databases, you gain the following benefits:

-   Increased security: Continuous monitoring for vulnerabilities and threats in open-source databases such as MySQL, PostgreSQL, and MariaDB.
    
-   Early detection: Alerts on any potential attack or misconfiguration, such as SQL injection attempts, data leaks, or malicious access.
    
-   Improved compliance: Helps meet regulatory requirements by ensuring that databases are properly secured and continuously monitored.
    

  

Impact:

-   Provide continuous monitoring and real-time threat detection for MySQL, PostgreSQL, and MariaDB.
    
-   Increase visibility into vulnerabilities, misconfigurations, and suspicious activity through Microsoft Defender for Cloud dashboards.
    
-   Enable proactive risk mitigation and improved compliance posture.
    

Default Value:

By default, Microsoft Defender for Open-Source Relational Databases is not enabled.

  

Pre-requisites:

-   Azure subscription with Microsoft Defender for Cloud enabled.
    
-   Global Administrator or Security Administrator permissions to enable and configure Microsoft Defender for Open-Source Relational Databases.
    

  

Test Plan:

1.  Sign in to the Azure Portal **[https://portal.azure.com](https://portal.azure.com/)** .
    
2.  Search for Microsoft Defender for Cloud.
    
3.  Under the management section, select the Environment settings, then choose the subscription where your Open-Source Relational Databases is located.
    
4.  Under Cloud Workload Protection (CWPP), go to Databases, click Select types, choose Open-Source Relational Databases, and verify whether it is turned On or Off.”
    
5.  If it is OFF, follow the Implementation steps.
    

![](https://support.icompaas.com/assets/kb/18bf8a27a8d1dba7.png)

  

Implementation Steps:

1.  Sign in to the Azure Portal **[https://portal.azure.com](https://portal.azure.com/)** .
    
2.  Search for Microsoft Defender for Cloud.
    
3.  Under the management section, select the Environment settings, then choose the subscription where your Open-Source Relational Databases is located.
    

  

![](https://support.icompaas.com/assets/kb/e2239b04647ac549.png)

  

4.  Under Cloud Workload Protection (CWPP), in Databases, click Select types, choose Open-Source Relational Databases, and set it to on.
    

![](https://support.icompaas.com/assets/kb/f397501bc40abf2c.png)

5.  Click on continue and save the changes.
    

Backout Plan:

1.  Sign in to the Azure Portal **[https://portal.azure.com](https://portal.azure.com/)** .
    
2.  Search for Microsoft Defender for Cloud.
    
3.  Under the management section, select the Environment settings, then choose the subscription where your Open-Source Relational Databases are located.
    
4.  Under Cloud Workload Protection (CWPP), in Databases, click Select types, choose Open-Source Relational Databases, and set it to off.
    
5.  Save it.
    

Reference:

-   [https://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-for-databases-introduction](https://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-for-databases-introduction)

## Related compliance guidance

- [SOC 2 compliance: a practical implementation guide for cloud-native SaaS teams](https://support.icompaas.com/compliance/soc-2-trust-services-criteria): Configuration checks like this one are the technical half of a SOC 2 / ISO 27001 programme — the guide shows where they fit, what else an auditor expects, and how to evidence them.
- [ISO/IEC 27001:2022 compliance: a practical implementation guide](https://support.icompaas.com/compliance/iso-27001-2022): ISO 27001 Annex A.8 (technological controls) is where cloud hardening evidence lands; the guide shows how to run the ISMS around it.