diff --git a/.azure/pipelines/ci.yml b/.azure/pipelines/ci.yml
index c833ef6f7e8e..7c407c2da5bf 100644
--- a/.azure/pipelines/ci.yml
+++ b/.azure/pipelines/ci.yml
@@ -124,6 +124,14 @@ extends:
         enabled: true
       tsa:
         enabled: true
+      policy: MicrosoftCanary
+      prefast:
+        enabled: true
+        break: true
+        severity: CriticalError
+      featureFlags:
+        usePrefastVersion3: true
+        checkIfEnablePrefast: false
     containers:
       azureLinux30Net10BuildAmd64:
         image: mcr.microsoft.com/dotnet-buildtools/prereqs:azurelinux-3.0-net10.0-build-amd64