Microsoft Defender for Cloud – Secure Score dropped from 100% to 78%, seeking remediation guidance

Hello Adam Carson,

A drop in Secure Score generally indicates that Defender for Cloud has identified new recommendations or that an existing resource no longer meets a recommended security setting.

From the screenshots, the recommendations contributing most to the score reduction appear to be:

• Web Application should only be accessible over HTTPS Verify that the affected App Service has HTTPS Only enabled under Configuration > General settings. Once the change is applied and Defender for Cloud completes a new assessment, the recommendation should clear.
• SQL databases should have vulnerability findings resolved This recommendation is triggered when SQL Vulnerability Assessment detects security findings. Review the affected database(s), examine the reported findings, and apply the recommended fixes. If a finding has been reviewed and accepted as part of your organization's risk posture, consider whether baselining is appropriate.

The remaining recommendations are lower severity but may still affect the overall score:

• Review subscription owner assignments and remove any that are no longer required.
• Encrypt Automation Account variables that contain sensitive information.
• Use Microsoft Entra PIM and eligible role assignments instead of permanent privileged access where possible.

Addressing these recommendations should help improve the Secure Score and bring it closer to its previous level.