Shield your business with the latest Trusted Platform Module (TPM) 2.0 technologies, silicon-assisted security, and data and identity safeguards. Innovations like Secured-core PCs and Microsoft Pluton offer extra protection for data-sensitive scenarios.
To safeguard user credentials and essential system functions, virtualization-based security (VBS) and hypervisor-protected code integrity (HVCI) are already enabled on new Windows 11 devices.1 VBS protects against malicious exploits by hosting a secure kernel separated from the operating system.
Protect critical resources such as Windows Hello2 with a hardware-based root of trust. Windows Defender System Guard helps protect and maintain the integrity of the system as it starts up and validates that system integrity has truly been maintained through local and remote attestation.
Secured-core PCs come with the advanced security features of Windows 11 turned on protecting your most sensitive data from advanced firmware-level attack. These devices are recommended for people handling sensitive data like intellectual property, financial records, or classified information.
Operating system protection
Keep data secured with built-in protections such as advanced encryption, robust network and system security, and intelligent safeguards against ever-evolving threats.
Designed for consumers and information workers, Smart App Control protects by blocking untrusted or unsigned software. Smart App Control will ship with new devices with Windows 11 2022 update installed.3Learn about Smart App ControlDesigned for consumers and information workers, Smart App Control protects by blocking untrusted or unsigned software. Smart App Control will ship with new devices with Windows 11 2022 update installed.3Learn about Smart App Control
Microsoft Defender Application Guard protects your company while your employees work online by opening untrusted files and websites in an isolated container. Learn about Defender Application GuardMicrosoft Defender Application Guard protects your company while your employees work online by opening untrusted files and websites in an isolated container. Learn about Defender Application Guard
Protect access to sensitive information and safeguard identities with the latest security innovations.
Enhanced phishing protection
Enhanced phishing protection with Microsoft Defender SmartScreen helps thwart credential theft by warning users when they enter their Microsoft credentials into a malicious website.
Lose the passwords and gain security with Windows Hello for Business. Sign in with PIN, face, or fingerprint. You can also use facial recognition with presence detection to sign you in when you approach, and lock when you leave.4
In a newly hybrid working world, both security threats (and innovations) are multiplying. Learn about the benefits and challenges of adopting security solutions across industries and countries, and discover ways to enable your company’s security decision makers.
HVCI is automatically enabled on new Windows 11 devices with clean installations. HVCI must be enabled on upgraded devices.
Features and app availability may vary by region.
Devices running previous versions of Windows 11 require a reset and clean installation of Windows 11 2022 Update to take advantage of this feature. Smart App Control will be disabled on devices enrolled in enterprise management. Enterprises running unsigned line of business applications should continue to leverage Windows Defender Application Control. Feature availability may vary by market and user profile.
Requires specialized hardware, including fingerprint reader, illuminated IT sensor or other biometric sensors and capable devices.