Build cloud web apps on Windows, macOS, and Linux with a standard foundation
You can build web services, IoT apps, and mobile backends with the same code, regardless of the server operating environment. ASP.NET Core runs on the .NET runtime and is designed with both cloud deployment and on-premises environments in mind. Its modular composition reduces unnecessary overhead, giving developers the flexibility to select and combine only the features they need.
Platform Independence and Modular Structure
This framework supports development and execution on Windows, macOS, and Linux. Applications run on the free, open-source .NET runtime, providing a development experience optimized for cloud or self-hosted server environments. Components are separated into modules, allowing solutions to be configured with minimal overhead. This enables you to selectively use only the parts required by your project size or requirements.
Community Participation and Development Trends
Developers can contribute by downloading and testing the latest daily builds, filing issues, or participating in design discussions. You can check development progress in real time through the community standup, which is live-streamed on YouTube every week. The roadmap document also helps you understand future milestones and topic directions. Building the source code directly is also a good way to understand the internal structure of the framework.
Security Vulnerability Reporting Procedure
Security-related issues or bugs must be reported privately through the Microsoft Security Response Center (MSRC) rather than posted publicly. Using the MSRC researcher portal ensures a response within 24 hours. The same procedure is specified in the security documentation for this repository. You can also review information about the related Microsoft .NET bounty program.
Build Selection Guide by Deployment Environment
The required build packages differ depending on the target deployment platform. In Windows environments, you can install a hosting bundle that includes the IIS plugin (ASP.NET Core Module). In macOS and Linux environments, the IIS plugin is not required, so you choose shared framework binaries or an installer. If you are unsure which package is needed, installing the .NET SDK, which includes all tools except the IIS plugin, is the simplest option. Builds are also provided for Linux architectures (x64, arm, arm64) and musl-based systems.
Pre-Adoption Checks
This framework only runs in environments where the .NET runtime is installed, so you must first verify that .NET exists on the target server. If you plan to host via IIS on Windows, you need the hosting bundle; in other environments, you must separately install the SDK or shared framework. On specific platforms (e.g., macOS), only binaries are provided instead of an installer, so you should carefully review the installation method. You should also be aware that any discovered security issues must be reported through MSRC, not public channels.
