Essentially, Windows is creating a small “virtual” OS and browser for every untrusted browser session (and not every tab), and isolating it from the rest of your PC. WDAG takes sandboxing a bit further, using your PC’s capability for virtualization to protect against malware escaping from the browser. You may have heard that Google Chrome works by “sandboxing” your browser, isolating the browser renderer and protecting Windows, other PCs on the network, and other devices from malware. It debuted on Windows 10 Pro as part of the Windows 10 April 2018 Update, and will receive some new features as part of the October 2018 update, too.
Now that same protection has migrated to Windows 10 Pro-sorry, Windows 10 Home users-as an optional feature that you can turn on within Windows, for free. WDAG was originally developed for Windows 10 Enterprise, protecting companies with billions of dollars at stake. While no solution is totally safe, Microsoft now has a free, specialized version of its Edge browser specifically designed to protect you online: Windows Defender Application Guard, or WDAG.
Occasionally, for whatever reason, we browse parts of the web we know could be dangerous, where malicious pop-ups, ransomware or other malware could infect our PCs.