Microsoft Rolls Out AI-Powered Scanning Tool for Government Cybersecurity
Microsoft has introduced an AI-powered scanning tool called Codename MDASH to help federal agencies identify and validate software vulnerabilities. The tool uses multiple AI models working together to flag and confirm security flaws.
Codename MDASH is designed to support government cybersecurity by providing a more effective way to detect vulnerabilities in complex supply chains. It functions as an agentic code scanner, tracing how information moves through a program to determine whether a flaw is genuinely exploitable.
The system's multi-model, multi-agent design allows it to score 96.55 on the CyberGym benchmark for real-world vulnerabilities. This means that Codename MDASH can accurately identify and prioritize potential security risks, giving defenders more time to patch vulnerabilities before they are exploited by attackers.
Codename MDASH is now available through Azure Government, a cloud environment built to meet compliance requirements for federal, national security, and state and local government customers. Microsoft has used the tool on its own software for several months and is now making it available to select U.S. government agencies and authorized partners.