AzureGoat is a vulnerable by design infrastructure deployed on Microsoft Azure that incorporates the OWASP Top 10 web application security risks from 2021 and various misconfigurations across Azure services. The platform includes vulnerabilities in Azure App Functions, CosmosDB, Storage Accounts, Automation services, and Identity management components. It simulates real-world cloud infrastructure while intentionally introducing security weaknesses for educational purposes. The environment provides multiple attack paths and privilege escalation opportunities that allow security professionals to practice compromising cloud infrastructure. Users can explore various Azure-specific vulnerabilities and misconfigurations in a controlled setting. AzureGoat serves as a training platform for penetration testers, security researchers, and cloud security professionals to develop skills in Azure security assessment and exploitation techniques.