diff --git a/cloudimized/azurecore/applicationsecuritygroupsquery.py b/cloudimized/azurecore/applicationsecuritygroupsquery.py
new file mode 100644
index 0000000..7a6f650
--- /dev/null
+++ b/cloudimized/azurecore/applicationsecuritygroupsquery.py
@@ -0,0 +1,31 @@
+"""
+Azure query for Application Security Groups
+"""
+from azure.identity import DefaultAzureCredential
+from azure.mgmt.network import NetworkManagementClient
+from cloudimized.azurecore.azurequery import AzureQuery
+from typing import Dict, List
+
+
+@AzureQuery.register_class("applicationSecurityGroups")
+
+class ApplicationSecurityGroupsQuery(AzureQuery):
+    """
+    Query class for Azure Application Security Groups
+    Collects ASG configurations and stores them in the 'applicationSecurityGroups' folder.
+    """
+    def _AzureQuery__send_query(self,
+                                credential: DefaultAzureCredential,
+                                subscription_id: str,
+                                resource_groups) -> List[Dict]:
+        """
+        Sends Azure query that lists Network Security Groups in subscription in project.
+        See:https://learn.microsoft.com/en-us/rest/api/virtualnetwork/application-security-groups/list-all?view=rest-virtualnetwork-2025-03-01&tabs=Python
+        :param credential:  Azure credential object
+        :param subscription_id: Azure subscription ID to query
+        :param resource_groups: irrelevant for this implementation, needed due to inheritance
+        :return: List of resources that were queried
+        """
+        client = NetworkManagementClient(credential=credential, subscription_id=subscription_id)
+        result = client.application_security_groups.list_all()
+        return result
diff --git a/cloudimized/singlerunconfigs/azure/applicationSecurityGroups.yaml b/cloudimized/singlerunconfigs/azure/applicationSecurityGroups.yaml
new file mode 100644
index 0000000..177e913
--- /dev/null
+++ b/cloudimized/singlerunconfigs/azure/applicationSecurityGroups.yaml
@@ -0,0 +1,6 @@
+resource: applicationSecurityGroups
+field_exclude_filter:
+  - etag
+  - provisioning_state
+#item_exclude_filter:
+#  -