Protect your business with Microsoft security and Surface
Protect your business with Microsoft security and Surface
Stay secure and maintain control, from chip to cloud, with security from Microsoft. Mount proactive defences with security built in, and manage through the cloud wherever employees work.

Peace of mind at the chip level


Resist physical tampering and malicious software with TPM

Protect external ports with DMA Protect
If a Surface removable SSD4 is tampered with, the device will shut off power. The resulting reboot causes UEFI to wipe memory, to erase any residual data.

Prevent rootkit malware from running with Secure Boot

Prevent, detect and respond to threats

Manage down to the firmware level
Surface is the only manufacturer to have DFCI1 enabled for modern cloud-based device management through Microsoft Endpoint Manager.*

Stay secure with biometric authentication

Keep data secure with conditional access

IT Pro resources

Microsoft Protection Plans
Maximise your investment in Surface with Microsoft Protection Plans. Explore Surface warranty details, extended coverage and support options.

Support for Business
* Sold separately.
1 Surface Go and Surface Go 2 use a third-party UEFI and do not support DFCI. DFCI is currently available for Surface Book 3, Surface Laptop 3, Surface Pro 7 and Surface Pro X. Find out more about managing Surface UEFI settings.