Windows security

Built with Zero Trust principles at the core to safeguard data and access anywhere, keeping you protected and productive.

Zero Trust and Windows

Overview

• Overview

Hardware security

Overview

• Overview

Concept

• Trusted Platform Module
• Windows Defender System Guard firmware protection
• System Guard Secure Launch and SMM protection enablement
• Virtualization-based protection of code integrity
• Kernel DMA Protection

Operating system security

Overview

• Overview

Concept

• System security
• Encryption and data protection
• Windows security baselines
• Virtual private network guide
• Windows Defender Firewall
• Virus & threat protection

Application security

Overview

• Overview

Concept

• Application Control and virtualization-based protection
• Application Control
• Application Guard
• Windows Sandbox
• Microsoft Defender SmartScreen
• S/MIME for Windows

User security and secured identity

Overview

• Overview

Concept

• Windows Hello for Business
• Windows Credential Theft Mitigation
• Protect domain credentials
• Windows Defender Credential Guard
• Lost or forgotten passwords
• Access control
• Smart cards

Cloud services

Overview

• Overview

Concept

• Mobile device management
• Azure Active Directory
• Your Microsoft Account
• OneDrive
• Family safety

Security foundations

Overview

• Overview

Reference

• Microsoft Security Development Lifecycle
• Microsoft Bug Bounty
• Common Criteria Certifications
• Federal Information Processing Standard (FIPS) 140 Validation

Privacy controls

Reference

• Windows and Privacy Compliance