You can now !exploitable straight from Microsoft .
Who we are and what we do

The Microsoft Security Engineering Center helps to protect Microsoft customers by delivering inherently more secure products and services. Our 3 teams work together to provide personal security guidance to product teams, the industry leading software security process (SDL), and applied security science and technology that results in improved product resiliency.


Security Assurance (People)

Working closely with the SDL and Science teams, Security Assurance helps teams ship products that are fundamentally secure by ensuring the requirements of the Security Development Lifecycle are met or exceeded. Security Assurance is instrumental in driving security innovations, processes and technologies into products throughout Microsoft. Security Assurance influences the design and strategy of the SDL to ensure it stays relevant and can be implemented in a practical way.


Software Development Lifecycle (Process)

The Software Development Lifecycle team manages updating, releasing and evangelizing the Microsoft Security Development Lifecycle—the industry leading software security process. The SDL has played a critical role in embedding security and privacy into Microsoft software and culture, leading to measurable security and privacy improvements in flagship products such as Microsoft Windows Vista, Microsoft Office, and SQL Server

Security Science (Technology)

The Microsoft Security Science team protects customers by improving the security and privacy resiliency of Microsoft products through applied security research. Specifically, Security Science develops more effective and scalable ways to find vulnerabilities, researches and applies innovative exploit mitigation techniques to Microsoft products, and focuses on tracking and providing early warning of new exploits.


Protecting Microsoft customers throughout the entire life cycle

The Microsoft Security and Engineering Center works with two other Microsoft security centers: the Microsoft Security Response Center and the Microsoft Malware Protection Center to help protect customers throughout the entire software lifecycle, in development, deployment, and operations.