VENDOR APPEAL GUIDE

Microsoft false positive?
Here’s where to start.

Microsoft Security Intelligence accepts files that were incorrectly classified as malware or potentially unwanted applications.

Vendor guidance checkedSources reviewed: 2026-10-14File

Appeal contacts

Choose a channel for the type of detection you want reviewed. Contact availability and acceptance are controlled by the vendor.

How to request a review

File review

Microsoft Security Intelligence accepts files that were incorrectly classified as malware or potentially unwanted applications.

  1. Open the submission portal, sign in and choose the appropriate submitter role; software publishers should choose Software developer.
  2. Select the affected product and the appropriate Incorrectly detected option. Attach the exact detected file and give its detection name, source and relevant context.
  3. Track the final determination in submission history. Developers disputing that result can use the contact form supplied with the results.
  • Microsoft does not accept file samples by email.
  • This route concerns file detections. Select the product actually responsible for the detection.

Names you may see in a report

Microsoftmicrosoft

Aliases help locate the responsible vendor. Related products can use different submission channels; check the scope shown above.

Sources for this entry

“Guidance checked” means a public vendor source supports the route or instructions. We have not sent a test appeal or verified mailbox delivery. Read our methodology.

← Back to all vendors