### YamlMime:Landing

title: Windows security documentation
summary: Windows is designed with zero-trust principles at its core, offering powerful security from chip to cloud. As organizations embrace hybrid work environments, the need for robust security solutions becomes paramount. Windows integrates advanced hardware and software protection, ensuring data integrity and access control across devices. Learn about the different security features included in Windows.

metadata:
  ms.topic: landing-page
  ms.collection:
    - tier1
    - essentials-security
  author: paolomatarazzo
  ms.author: paoloma
  manager: aaroncz
  ms.date: 10/18/2024

# linkListType: architecture | concept | deploy | download | get-started | how-to-guide | tutorial | overview | quickstart | reference | sample | tutorial | video | whats-new

landingContent:

  - title: Windows 11 security book
    linkLists:
      - linkListType: overview
        links:
          - text: Introduction
            url: /windows/security/book
          - text: Hardware security
            url: /windows/security/book/hardware-security
          - text: Operating system security
            url: /windows/security/book/operating-system-security
          - text: Application security
            url: /windows/security/book/application-security
          - text: Identity protection
            url: /windows/security/book/identity-protection
          - text: Privacy
            url: /windows/security/book/privacy
          - text: Cloud services
            url: /windows/security/book/cloud-services
          - text: Security foundation
            url: /windows/security/book/security-foundation

  - title: Learn about hardware security
    linkLists:
      - linkListType: get-started
        links:
          - text: Trusted Platform Module (TPM)
            url: /windows/security/hardware-security/tpm/trusted-platform-module-overview
          - text: Microsoft Pluton
            url: /windows/security/hardware-security/pluton/microsoft-pluton-security-processor
          - text: Windows Defender System Guard
            url: /windows-hardware/design/device-experiences/oem-vbs
          - text: Virtualization-based security (VBS)
            url: /windows/security/hardware-security/how-hardware-based-root-of-trust-helps-protect-windows
          - text: Secured-core PC
            url: /windows-hardware/design/device-experiences/oem-highly-secure-11

  - title: Learn about OS security
    linkLists:
      - linkListType: get-started
        links:
          - text: Trusted boot
            url: /windows/security/operating-system-security
          - text: Windows security settings
            url: /windows/security/operating-system-security/system-security/windows-defender-security-center/windows-defender-security-center
          - text: BitLocker
            url: /windows/security/operating-system-security/data-protection/bitlocker/
          - text: Personal Data Encryption
            url: /windows/security/operating-system-security/data-protection/personal-data-encryption
          - text: Windows security baselines
            url: /windows/security/operating-system-security/device-management/windows-security-configuration-framework/windows-security-baselines
          - text: Microsoft Defender SmartScreen
            url: /windows/security/operating-system-security/virus-and-threat-protection/microsoft-defender-smartscreen/
          - text: Windows Firewall
            url: /windows/security/operating-system-security/network-security/windows-firewall/
      - linkListType: architecture
        links:
          - text: BitLocker planning guide
            url: /windows/security/operating-system-security/data-protection/bitlocker/planning-guide
      - linkListType: how-to-guide
        links:
          - text: Configure BitLocker
            url: /windows/security/operating-system-security/data-protection/bitlocker/configure
          - text: Configure Personal Data Encryption
            url: /windows/security/operating-system-security/data-protection/personal-data-encryption/configure
      - linkListType: whats-new
        links:
          - text: Hyper-V firewall
            url: /windows/security/operating-system-security/network-security/windows-firewall/hyper-v-firewall

  - title: Learn about identity protection
    linkLists:
      - linkListType: get-started
        links:
          - text: Passwordless strategy
            url: /windows/security/identity-protection/passwordless-strategy
          - text: Windows Hello for Business
            url: /windows/security/identity-protection/hello-for-business
          - text: Windows passwordless experience
            url: /windows/security/identity-protection/passwordless-experience
          - text: Web sign-in for Windows
            url: /windows/security/identity-protection/web-sign-in
          - text: Passkeys
            url: /windows/security/identity-protection/passkeys
          - text: FIDO2 security keys
            url: /azure/active-directory/authentication/howto-authentication-passwordless-security-key
          - text: Enhanced phishing protection with SmartScreen
            url: /windows/security/operating-system-security/virus-and-threat-protection/microsoft-defender-smartscreen/enhanced-phishing-protection
      - linkListType: how-to-guide
        links:
          - text: Configure PIN reset
            url: /windows/security/identity-protection/hello-for-business/pin-reset
          - text: RDP sign-in with Windows Hello for Business
            url: /windows/security/identity-protection/hello-for-business/rdp-sign-in
      - linkListType: architecture
        links:
          - text: Plan a Windows Hello for Business deployment
            url: /windows/security/identity-protection/hello-for-business/deploy/
      - linkListType: deploy
        links:
          - text: Cloud Kerberos trust deployment guide
            url: /windows/security/identity-protection/hello-for-business/deploy/hybrid-cloud-kerberos-trust

  - title: Learn about application security
    linkLists:
      - linkListType: get-started
        links:
          - text: App Control for Business
            url: /windows/security/application-security/application-control/windows-defender-application-control/
          - text: User Account Control (UAC)
            url: /windows/security/application-security/application-control/user-account-control
          - text: Microsoft vulnerable driver blocklist
            url: /windows/security/application-security/application-control/windows-defender-application-control/design/microsoft-recommended-driver-block-rules
          - text: Microsoft Defender Application Guard (MDAG)
            url: /windows/security/application-security/application-isolation/microsoft-defender-application-guard/md-app-guard-overview
          - text: Windows Sandbox
            url: /windows/security/application-security/application-isolation/windows-sandbox/
      - linkListType: how-to-guide
        links:
          - text: Configure Windows Sandbox
            url: /windows/security/application-security/application-isolation/windows-sandbox/windows-sandbox-configure-using-wsb-file

  - title: Learn about security foundations
    linkLists:
      - linkListType: get-started
        links:
          - text: Zero trust
            url: /windows/security/security-foundations/zero-trust-windows-device-health
          - text: FIPS 140 validation
            url: /windows/security/security-foundations/certification/fips-140-validation
          - text: Common Criteria Certifications
            url: /windows/security/security-foundations/certification/windows-platform-common-criteria
          - text: Microsoft Security Development Lifecycle (SDL)
            url: /windows/security/security-foundations/msft-security-dev-lifecycle
          - text: Microsoft Windows Insider Preview bounty program
            url: https://www.microsoft.com/msrc/bounty-windows-insider-preview
          - text: OneFuzz service
            url: https://www.microsoft.com/security/blog/2020/09/15/microsoft-onefuzz-framework-open-source-developer-tool-fix-bugs/
      - linkListType: whats-new
        links:
          - text: Completed FIPS validations - Windows 11
            url: /windows/security/security-foundations/certification/validations/fips-140-windows11
          - text: Completed CC certifications - Windows 11
            url: /windows/security/security-foundations/certification/validations/cc-windows11

  - title: Learn about cloud security
    linkLists:
      - linkListType: get-started
        links:
          - text: Security baselines with Intune
            url: /mem/intune/protect/security-baselines
          - text: Windows Autopatch
            url: /windows/deployment/windows-autopatch
          - text: Windows Autopilot
            url: /windows/deployment/windows-autopilot
          - text: Universal Print
            url: /universal-print
          - text: Remote wipe
            url: /windows/client-management/mdm/remotewipe-csp