Microsoft makes Cloud App Security generally available, using the tech from last year's Adallom acquisition
Microsoft marches forward with its security plan, releasing Cloud App Security — As Microsoft works its way toward implementing the security plan that CEO Satya Nadella outlined …
Context & Ripple Effects
This closes the loop on a fast-moving buying spree: Microsoft confirmed the Adallom acquisition last September at a reported $250M, and weeks later stood up a Cyber Defense Operations Center alongside an Enterprise Cybersecurity Group under Nadella's security plan. General availability of Cloud App Security is the first proof that the plan converts acquisitions into shippable products rather than absorbed talent.
It also sets the template for what follows in this coverage thread — Azure Sentinel three years later extends the same idea from app-level visibility to network-wide threat response, making today's launch the opening move in Microsoft's cloud-native security portfolio.
First-order effects
- Enterprise customers on Office 365 gain built-in visibility and control over third-party cloud app usage without buying a separate CASB product, and Microsoft turns the Adallom technology into subscription revenue inside its existing commercial bundles.
- Standalone cloud-access-security vendors now compete against a rival that can bundle equivalent capability into licenses customers already pay for.
Second-order effects
- Independent CASB providers are pushed toward differentiation on depth and multi-cloud breadth, since Microsoft's distribution advantage pressures their pricing on the basic shadow-IT discovery use case.
- The success of folding Adallom into the stack gives Microsoft's security leadership a repeatable M&A playbook, encouraging further acquisitions that later materialize as services like Azure Sentinel.
Third-order effects
- Security shifts from a point-product purchase to attach revenue on cloud suites — a structure that culminates in Microsoft's later moves like the Security Store with SaaS tools and AI agents, where the platform owner controls both the shelf and the checkout.
- If the acquire-and-bundle pattern holds, independent security categories consolidate around hyperscaler ecosystems, raising the long-term question of how much of enterprise security one cloud vendor should own end to end.
The trend: Microsoft is building security as an integrated layer of its cloud business by acquiring startups and productizing them into subscriptions, a path running from Adallom through Azure Sentinel to today's agent-driven Security Store.