--- title: .NET Compatibility Requirements description: Datadog, the leading service for cloud-scale monitoring. breadcrumbs: >- Docs > Datadog Security > Code Security > Runtime Code Analysis (IAST) > Set up Runtime Code Analysis (IAST) > Compatibility Requirements > .NET Compatibility Requirements --- > For the complete documentation index, see [llms.txt](https://docs.datadoghq.com/llms.txt). # .NET Compatibility Requirements {% callout %} # Important note for users on the following Datadog sites: app.ddog-gov.com, us2.ddog-gov.com {% alert level="danger" %} This product is not supported for your selected [Datadog site](https://docs.datadoghq.com/getting_started/site.md). ({% placeholder "user-datadog-site-name" /%}). {% /alert %} {% /callout %} ## Application Security capabilities support{% #application-security-capabilities-support %} The following application security capabilities are supported in the .NET library, for the specified tracer version: | Application Security capability | Minimum .NET tracer version | | -------------------------------------- | --------------------------- | | Threat Detection | 2.23.0 | | Threat Protection | 2.26.0 | | Customize response to blocked requests | 2.27.0 | | Software Composition Analysis (SCA) | 2.16.0 | | Code Security | 2.42.0 | | Automatic user activity event tracking | 2.32.0 | | API Security | 2.42.0 | The minimum tracer version to get all supported application security capabilities for .NET is 2.42.0. **Note**: Threat Protection requires enabling [Remote Configuration](https://docs.datadoghq.com/remote_configuration.md#enabling-remote-configuration), which is included in the listed minimum tracer version. ### Supported deployment types{% #supported-deployment-types %} | Type | Threat Detection support | Software Composition Analysis | Code Security | | ----------------- | ------------------------ | ----------------------------- | ---------------- | | Docker | yes | yes | yes | | Kubernetes | yes | yes | yes | | Amazon ECS | yes | yes | yes | | AWS Fargate | yes | yes | Preview (2.42.0) | | AWS Lambda | yes | | Azure App Service | yes | yes | yes | **Note**: Azure App Service is supported for **web applications only**. Application Security capabilities are not supported for Azure Functions. ## Language and framework compatibility{% #language-and-framework-compatibility %} ### Supported .NET versions{% #supported-net-versions %} All versions listed in this section are generally available (GA). Code Security supports the following .NET and .NET Core runtimes: | .NET Version | Microsoft End of Life | Package version | | ------------- | --------------------- | ------------------ | | .NET 10 | *November 14, 2028* | latest (>= 3.31.0) | | .NET 9 | *November 10, 2026* | latest (>= 3.6.0) | | .NET 8 | *November 10, 2026* | latest (>= 2.42.0) | | .NET 7 | May 14, 2024 | latest (>= 2.42.0) | | .NET 6 | November 12, 2024 | latest (>= 2.42.0) | | .NET 5 | May 10, 2022 | latest (>= 2.42.0) | | .NET Core 3.1 | December 13, 2022 | latest (>= 2.42.0) | Code Security supports the following .NET Framework versions: | .NET Framework Version | Microsoft End of Life | Package version | | ---------------------- | --------------------- | --------------- | | 4.8 | latest | | 4.7.2 | latest | | 4.7 | latest | | 4.6.2 | latest | | 4.6.1 | April 26, 2022 | latest | These are supported on the following architectures: - Linux (GNU) x86-64, ARM64 - Alpine Linux (musl) x86-64, ARM64 - Windows (msvc) x86, x86-64 For more information on the runtimes and operating systems that the .NET tracer supports, see [.NET and .NET Core Compatibility Requirements](https://docs.datadoghq.com/tracing/trace_collection/compatibility/dotnet-core.md) and [.NET Framework Compatibility Requirements](https://docs.datadoghq.com/tracing/trace_collection/compatibility/dotnet-framework.md). ### Web framework compatibility{% #web-framework-compatibility %} **Web framework integrations provide:** - Attacker source HTTP request details - Tags for the HTTP request (status code, method, etc) - Distributed Tracing to see attack flows through your applications ##### Application Security Capability Notes{% #application-security-capability-notes %} - **Software Composition Analysis** is supported on all frameworks. - If your framework is not listed below, **Code Security** still detects Insecure Cookie vulnerabilities. | Framework | Threat Detection supported? | Threat Protection supported? | Code Security? | | ------------------------------------- | --------------------------- | ---------------------------- | -------------- | | ASP.NET Core (including minimal APIs) | yes | yes | yes | | ASP.NET MVC | yes | yes | yes | | ASP.NET Web API 2 | yes | yes | yes | {% alert level="info" %} If you don't see your framework of choice listed, let us know! Fill out [this short form to send details](https://forms.gle/gHrxGQMEnAobukfn7). {% /alert %} ### Data store compatibility{% #data-store-compatibility %} **Datastore tracing provides:** - SQL attack detection - query info (for example, a sanitized query string) - error and stacktrace capturing ##### Application Security Capability Notes{% #application-security-capability-notes-1 %} - **Threat Protection** also works at the HTTP request (input) layer, and so works for all databases by default, even those not listed in the table below. | Framework | Threat Detection supported? | Threat Protection supported? | Code Security? | | ---------- | --------------------------- | ---------------------------- | -------------- | | OracleDB | yes | yes | yes | | ADO.NET | yes | yes | yes | | SQL Server | yes | yes | yes | | MySQL | yes | yes | yes | | SQLite | yes | yes | yes | ### User Authentication Frameworks compatibility{% #user-authentication-frameworks-compatibility %} Integrations to **User Authentication Frameworks provides:** - User login events including the user IDs - User signup events (apps using built-in SignInManager) - Account Takeover detection monitoring for user login events | Framework | | ---------------- | | \> .Net Core 2.1 |