Windows 10 devices include several security features that administrators should consider during their device planning phase, such as the following:

• Windows Defender Antivirus: Anti-malware that can protect Windows 10 and Windows Server computers.
• Microsoft Defender Advanced Threat Protection: Advanced protection against threats leveraging behavioral sensors, security analytics across different Microsoft services, and threat intelligence by Microsoft hunters and security teams.
• Windows Defender Application Guard: Isolates untrusted sites that are opened in an isolated Hyper-V-enabled container, separate from the host operating system.
• Windows Hello for Business: Replace passwords with strong two-factor authentication on PCs and mobile devices using a device-specific PIN or biometric credential that can't be captured and replayed on other devices.
• Credential Guard: The component responsible for isolating the secrets that are used throughout the machine to prevent unauthorized access.
• Windows Defender Application Control: Allows only authorized applications to run in users' machines.
• BitLocker: Whole-disk encryption, integrated with a device's Trusted Computing Module chip and the Windows 10 operating system.
• Windows Information Protection: Protects against data leakage separating personal and corporate data.

Microsoft Defender Advanced Threat Protection (ATP) can also protect Windows 7, Windows 8.1, Windows Server, and Mac OS X. More information about Microsoft Defender ATP can be found here: https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-advanced-threat-protection.