This post has been republished via RSS; it originally appeared at: Windows Blog.
Build is one of our favorite moments each year - a chance to connect with the global developer community and share what we’ve been building. Over the past year, we have connected with many developers pushing the boundaries of what’s possible on Windows. What we consistently hear is that you want a platform that meets you where you are, removes friction and gives you the flexibility to choose how and where you build across local and cloud, across platforms, languages and frameworks. That feedback has shaped everything we are announcing today. The foundation of great development starts with strong fundamentals, coupled with a great developer experience. We are continuing to raise the bar on Windows 11 quality and deeply focused on making Windows more secure, more reliable across the shell - from Explorer to Start to Search – with a simple goal to reduce cognitive load. Whether you are building modern applications or experimenting with agent-driven workflows, we are committed to making Windows more adaptable, capable and aligned with how development actually happens today. And as AI continues to reshape how software is built, we are investing deeply in enabling you to run your AI workloads securely where it makes the most sense on-device, in the cloud or across both without trade-offs. Our goal is simply to give you a platform that accelerates your ideas.What’s new for Windows platform at Build?
- Developer-optimized Windows 11 experience to build and ship faster.
- Coreutils for Windows - a set of Linux-like command line utilities that run natively on Windows, now generally available.
- WSL containers - a built-in way to create, run and interact with Linux containers using familiar CLI & API, coming soon to public preview.
- Windows Development Skills - gives agents structured knowledge to build great native Windows apps end-to-end using WinUI3 skills and WinApp CLI, now generally available.
- Intelligent Terminal – intentionally brings context-aware intelligence to your favorite agents directly into a terminal based experience to help debug errors, run multi-step tasks so you can stay in your flow, available in experimental preview.
- Windows Developer Configurations - powered by WinGet, sets up a distraction-free dev environment with VS Code, GitHub Copilot, WSL, PowerShell 7 and developer-optimized settings with one command on any Windows 11 device, now generally available.
- Windows 365 with Developer configuration – Windows 365 comes pre-configured with the same Windows developer configuration, available in public preview.
- Secure Windows platform to build and run agents with OS-enforced agent identity, containment and enterprise-grade manageability.
- Introducing Microsoft Execution Containers (MXC) SDK– A policy-driven execution layer that lets developers declare what an agent can access (e.g., files, network) with containment boundaries enforced at runtime. MXC offers a spectrum of isolation semantics that are dynamically composable based on intent and risk, available in early preview.
- Agent 365 native integration with MXC enables agents running on Windows to start secure and stay secure. Integration will deliver Defender, Entra, Intune and Purview protections so security and IT teams can constrain and secure local agents to prevent enterprise risk, available in preview in July.
- OpenClaw runs natively on Windows leveraging MXC - The Windows node and gateway run contained, so your system stays secure. You can easily install and use OpenClaw in Windows with its own companion app and set up your own claws or connect to existing ones, available in open-source. We are invested in continuing to make OpenClaw run securely on Windows.
- NVIDIA is bringing OpenShell to Windows built on MXC - Integrating MXC via OpenShell provides developers with an easy-to-deploy package for autonomous, always-on agents safely.
- Windows 365 for Agents - provides computer-using agents with secure, managed Cloud PCs to execute enterprise workflows, now generally available.
- Unmetered intelligence on Windows powered by on-device AI
- Introducing new on-device SLMs - Aion 1.0 Instruct, a smaller, faster and smarter on-device SLM, and Aion 1.0 Plan, a reasoning and tool-calling model that enables fully local agentic capabilities, available in the coming months.
- Expanding Windows AI APIs to more Windows 11 PCs across CPU and GPU Speech-to-text recognition API available on NPUs and CPUs. On-device SLM expands to capable dGPUs enabling text-intelligence capabilities locally and Video Super Resolution available on CPUs so developers can deliver richer experiences without a cloud round trip.
- Introducing Surface RTX Spark Dev Box – purpose-built for developers powered by NVIDIA RTX Spark silicon, delivering up to 1 petaflop of AI compute paired with 128 GB of unified memory shared across the CPU and GPU. Comes with all of the above developer optimized Windows 11 experience so developers can build, test and run AI and agent workloads locally without setup friction or unpredictable cloud costs.
- Introducing DGX Station for Windows — the world’s most powerful deskside AI supercomputer for developing and running agents on Windows — powered by the NVIDIA GB300 Grace Blackwell Ultra Superchip. It is purpose-built to develop and run up to 1 trillion-parameter frontier AI models locally, as well as connect always-on, frontier AI agents to enterprise applications and workflows, coming in Q4 this year.
- Introducing Project Solara, a new platform built from the ground up to power agent-driven experiences, including two new concept devices that reimagine how this comes to life. Together, these updates simplify how you set up, build and run across environments, bringing everything you need into a more cohesive Windows development experience.
- New capabilities in Microsoft Store – We are committed to making Microsoft Store a trusted platform for app distribution, delivering free and faster company onboarding with Entra ID support, accelerated app certification times, and new near real-time analytics and subscription insights for developers.
Developer-optimized Windows 11 experience to build and ship faster
We have optimized the Windows 11 experience for developers, bringing frequently used command line utilities, a familiar comfort shell, faster setup experience, a built-in way to create and interact with Linux containers on Windows and a new experimental Intelligent Terminal.Announcing general availability of Coreutils for Windows
Developers constantly move between platforms, but familiar commands don't work consistently, forcing workarounds, lost speed and context switching. To address this, we've built Coreutils for Windows from the uutils open-source project, a cross-platform reimplementation of GNU Coreutils in Rust. These are Linux-like command-line utilities that run natively on Windows. Whether you're moving between Linux, macOS, WSL, containers or cloud environments, the commands and workflows you've built over years just work in your Windows environment. Explore and get started with Coreutils for Windows. https://www.youtube.com/watch?v=_bcFOTI35gIAnnouncing WSL containers, coming soon to public preview
Containers and Linux are core to modern development workflows. Windows Subsystem for Linux (WSL) has become foundational for running Linux workloads on Windows. Last year at Build 2025, we open-sourced WSL, and community contributions have grown to over 200 PRs per month. We're building on this momentum by integrating WSL more deeply into Windows with WSL containers. Modern container workflows on Windows often depend on third‑party tooling, adding setup overhead, licensing cost and limited enterprise control. IT teams also lack consistent visibility into what’s running and how containers interact with the underlying host. WSL containers provide a built-in way to create, run and interact with Linux containers on Windows. Whether you are working on local development, AI/ML workflows or containerized testing, Linux containers run out of the box. To enable you to build WSL containers, we are offering WSL containers CLI & API.- WSL containers CLI: Use the new exe binary to directly build, run and deploy Linux containers on Windows, out of the box.
- WSL containers API: Access functions to run Linux containers programmatically in your native Windows apps - unlocking scenarios like running local AI workloads, testing pipelines, and Linux based processing.
Announcing general availability of Windows Developer Configurations
We understand that getting to a code-ready state quickly matters, regardless of your development workflow. Windows Developer Configurations enables you to go from a fresh machine to a ready-to-code environment in minutes. It includes:- dev-config.winget - a WinGet configuration file, to get an optimized, distraction free development environment with the right versions of essential developer tools installed – WSL, PowerShell 7, Git, GitHub CLI, Visual Studio Code, Python and more. It also applies developer-optimized settings — like Git version control in File Explorer, file extensions visible and hidden files shown. It’s fully customizable, so you can adapt it to your needs and add your favorite third‑party tools.
- Workload-specific scripts for container, cloud and infrastructure development - make it easy to install the exact tools, libraries and dependencies you need for your specific use case.
- WSL comfort setup scripts - enable you to bring your preferred tools and workflows to Windows - like homebrew, zsh, starship, and more.
Announcing Intelligent Terminal, available as experimental version
Developers spend a significant part of their workflow in the terminal, but today that experience lacks integration with agentic tools and context they rely on. They must leave the terminal to look up fixes, and copy suggestions from multiple sources, which leads to increased context switching. To address this, Intelligent Terminal provides context to your favorite agents via ACP (Agent Communication Protocol) so you can stay in the terminal and query, debug or complete any task on hand. It is based on the existing Windows Terminal experience, so you get everything it offers (tabs, profiles, themes, settings, shells) plus native agent CLI integration in the agent pane. If no agent is installed, GitHub Copilot is available for you to get started. In a typical scenario, when a command fails, Intelligent Terminal automatically surfaces the context and suggests fixes you can run immediately in the dedicated agent pane. Instead of debugging step-by-step across multiple tools, you can resolve issues, iterate and move forward quickly while staying in your flow. To learn more, check out the Intelligent Terminal blog. https://www.youtube.com/watch?v=o1DmM6_z4zkAnnouncing general availability of Windows Development Skills
We are introducing Windows Development Skills to enable agents to directly leverage structured knowledge to execute across the full lifecycle of building a native Windows app using WinUI3 skills and winapp CLI. By powering agents with Windows specific application development knowledge, these skills help achieve token efficiency. To add Windows Development Skills to your favorite agents visit https://aka.ms/winui-skills. https://www.youtube.com/watch?v=7OK30hI5h-IAnnouncing Windows 365 with Developer configuration, available in public preview
Alongside local development, enterprises often increasingly need a cloud-based option to standardize development environments across teams, scale on demand and to be ready to code from any device - without managing local infrastructure or setup. To address these needs, we are bringing new developer capabilities to Windows 365, a cloud-based service that securely streams a full Windows desktop experience to any device. Windows 365 with Developer configuration offers ready‑to‑code environments in the cloud. This image provides a consistent, preconfigured Windows 11 development experience from first sign‑in, with commonly used tools such as Visual Studio Code, Git, GitHub CLI and WSL already set up. The environment can also be extended with additional SDKs, CLIs, packages and build tools based on project requirements, while remaining aligned with organization policies and controls. With flexible performance configurations and seamless access from any device, Windows 365 helps streamline development workflows, whether working on-site or remotely, across Windows and Linux (via WSL) environments, running AI models or moving between local and cloud setups. To learn more, check out the Windows 365 blog. All these improvements share a common goal: giving developers an environment they can rely on, one that stays out of the way and keeps them in the flow. And as AI becomes integral to how software is built and shipped, the platform must evolve too. That's why we're taking the next step: making Windows the best place to build and run agents.Windows is the secure platform to build and run agents with OS-enforced containment, agent identity and enterprise-grade manageability
As agents become more capable and autonomous, they're delivering material productivity gains. But they're also introducing new risk, and the issue isn't just the agent. It's the entire system the agent operates across. Every interaction — between agents and humans, tools, apps, models and even other agents — exposes new attack surface and introduces different failure modes. This is a multi-layer systems problem. That's why we've built containment, identity and manageability as foundational primitives in the operating system — making Windows the most trusted platform to build and run agents.
Microsoft Execution Containers (MXC) — now available in early preview
It's critical to contain agent impact without limiting productivity gains. That’s why we are introducing Microsoft Execution Containers (MXC), a cross-platform, policy-driven execution layer for agents across Windows and WSL. Developers declare what an agent can access, like files and networking related policies configured in Intune, and MXC enforces those boundaries at runtime. Windows delivers a composable sandbox spectrum through MXC — a single SDK and policy model that maps to the right isolation construct for any agent workload.- Fast process isolation (adopted by GitHub Copilot CLI) and session isolation separates the agent's execution from the user's desktop, clipboard, UI and input devices, and critically, binds the agent to a strong user identity — mitigating UI spoofing, input injection and cross-session data leakage. Process isolation and session isolation will be available to Windows Insiders shortly after Build.
- Windows 365 for Agents, now generally available, extends containment beyond the local device and agents run in an Intune-managed Cloud PC, fully separate from the user's machine.
- Micro-VMs, Linux containers and MXC integration for Windows 365 for Agents are currently on our roadmap as additional MXC containment capabilities.
- Agent 365 layers Entra and Intune policy on top so IT can govern containment centrally while developers choose the guardrail weight their workload demands.
OS-enforced Agent Identity and enterprise manageability on Windows
Beyond containment, every agent activity must be attributable and governed. Windows assigns agents a local ID or a cloud provisioned identity backed by Entra and attributes all activity from the container to that identity, so you can clearly differentiate human from agent. Native Windows integration with Agent 365 provides a common foundation for observability, security and governance, including native Intune integration to set policies that gate the agent runtime execution and control how agents run. Defender, Entra, Intune and Purview will provide runtime protections for evolving threats across access, sensitive data, malicious prompts and risky behavior so security and IT teams can prevent enterprise risk. Get started at: Microsoft Execution Containers. Learn more at: Windows Platform Security for AI Agents and aka.ms/BUILD_SecurityBlog.Innovating with partners in the ecosystem
We are partnering with leading innovators in the industry like Hermes, Manus, NVIDIA, OpenAI and OpenClaw, to ensure the containment we are building supports real developer needs. OpenClaw now runs the node and gateway securely on Windows leveraging MXC. You can use the new Windows companion app to easily set up your own claws or connect to existing ones. NVIDIA brings OpenShell to Windows, built on MXC. Integrating MXC via OpenShell provides developers with an easy-to-deploy package for autonomous, always-on agents safely. Hermes Agent will be integrating OpenShell and MXC in their new Windows application. "Continuously-running local agents, like Hermes Agent, require intentional isolation. Developers need control over what an agent can access and trust that those controls will hold,” said Dillon Rolnick, CEO of Nous Research. “Microsoft Execution Containers (MXC), integrated with OpenShell, provides a policy-driven foundation for private, on-device agents on Windows.” "Working with Microsoft on the Microsoft Execution Containers (MXC) allows us to explore new patterns for AI agents to safely and efficiently generate and execute code. By combining Codex's capabilities with MXC's execution environment, we aim to help developers move from intent to reliable execution faster, while maintaining the security and control enterprises need." said David Wiesen, Member of Technical Staff, OpenAI. “Manus is built to help users move from intent to completed work across tools, files, code and workflows,” said Tao Zhang, Chief Product Officer. “With Microsoft Execution Containers (MXC), Windows gives developers a policy-driven way to define what an agent can access and enforce those boundaries at runtime, so more autonomous agents can operate safely in enterprise environments.” Get started here: OpenClaw Windows Node.Announcing Windows 365 for Agents generally available within Agent 365
Windows 365 for Agents provides Cloud PCs that enable AI agents to execute multi-step workflows across software, including opening apps, navigating interfaces, entering inputs and processing data. Today, we are making Windows 365 for Agents generally available within Agent 365, enabling Agent builders to build computer-using agents for a variety of enterprise use cases. To learn more, check out Windows 365 for Agents documentation | Microsoft Learn.Unmetered intelligence delivered on Windows
We're entering a new era of software development. As AI models grow more powerful, agentic workflows demand continuous compute, escalating cloud costs. By shifting some of that intelligence to the edge, we are transforming the developer experience: frontier models tackle frontier problems, while everything else runs locally at scale. A new generation of on-device small language models (SLMs) on Windows is making this easier. Windows ML is the platform that unlocks unmetered intelligence on Windows, enabling developers to build, optimize and deploy AI at scale, across all silicon. Today we are bringing new capabilities to accelerate your local AI development.A new generation of on-device models - Aion 1.0 Instruct and Aion 1.0 Plan in preview
We are introducing a new generation of models purpose-built for local execution, each designed for a specific tier of device capability. Together, they represent a clear progression: from efficiency at scale to local agentic reasoning, all running without cloud dependency or per-token cost.- Aion 1.0 Instruct: efficiency at scale. Aion 1.0 Instruct is our next-generation small language model, smaller, faster and more efficient than our current Windows OS SLM. Designed from the ground up for on-device workloads, Aion 1.0 Instruct powers everyday text intelligence (summarization, rewrite, intents, accessibility) and extends beyond Windows APIs with integration into the Edge browser and availability as open weights. Developers can start experimenting with Aion 1.0 Instruct in preview today in Edge Insider channels and as an open source model in July on Hugging Face.
- Aion 1.0 Plan: local agentic reasoning. Aion 1.0 Plan is a 14-billion parameter reasoning and tool-calling model with 32K context length that ships in-box as part of Windows on capable devices. It enables applications to reason over user intent, invoke tools, manage files and orchestrate sub-agents, bringing fully agentic workflows onto the device.
Announcing new Speech Recognition API
Last year at Build, we introduced Windows AI APIs powered by local on-device models. Today we are adding Speech Recognition API to this list. Speech Recognition API enables real-time or batch, on-device speech-to-text from live audio. Developers can enable their apps to produce transcripts from recordings or embed captions anywhere audio plays, using microphone, streamed or audio file inputs, with hardware-accelerated execution where available. By running locally, transcriptions can still be generated without network connectivity, saving on cloud costs. This unlocks new possibilities for modern text entry, audio-video applications, dictation-enabled workflows and accessibility tools that need reliable, low-latency transcription regardless of connectivity. The Speech Recognition API will enter public preview. The API will initially be limited to English-language speech recognition and will expand as it gradually roll outs across global markets. Learn more about the new Speech Recognition API when it becomes available this week at: aka.ms/speech-recognition-api.Announcing Expansion of Windows AI APIs across GPUs and CPUs, now available
Windows AI APIs offer the fastest and easiest path for developers to integrate local AI into their apps using ready-to-use APIs powered by on-device models specializing in specific tasks. We are thrilled to share that Windows AI APIs are expanding beyond NPUs to CPUs and GPUs, bringing local AI experiences to a much broader set of Windows 11 devices. In addition to existing NPU support, our existing Windows inbox SLM is available on capable GPUs and Video super resolution and Speech Recognition on CPUs, all in public preview. https://www.youtube.com/watch?v=1mSUNPLDZNE https://www.youtube.com/watch?v=zWsBdlZsy_w This expansion gives developers a broader audience for their AI-powered applications with OS-optimized performance. Learn more about Windows API support and minimum hardware requirements here: aka.ms/WinAI/APIs The Windows inbox models that power the AI APIs are not automatically downloaded to every device. They are only acquired when an application on the device requests them, keeping storage and bandwidth impact minimal for users who do not need them. Many app developers are leveraging Microsoft Foundry on Windows to enable local AI in their applications.
https://www.youtube.com/watch?v=she5m9OTT7Q
With Microsoft Foundry on Windows, local AI is no longer a compromise - it is a platform for breakthrough developer experiences. From efficient small models to agentic reasoning to frontier coding, this is unmetered intelligence on Windows.
Windows on next-generation hardware purpose-built for developers
We are bringing purpose-built developer devices which are the best expression of the full suite of advancements and new capabilities we are introducing today from developer optimized experience, secure platform to build and run agents to our local AI platform. With the increase in capability of agentic and coding models that run locally on this class of device, we can take the next step for hybrid compute – bringing the best of cloud and client together. In GitHub Copilot CLI we will enable developers to configure selective task delegation to subagents powered by a local model. Using /fleet, the primary agent running in the cloud builds a plan, assesses the complexity of each task, and routes appropriate ones locally based on the models’ size and capability. This approach harnesses available local compute to reduce cost without compromising on quality. With Windows 11 PCs powered by capable silicon from AMD, Intel, NVIDIA and Qualcomm including workstation-class machines powered by AMD Ryzen™ AI MAX+ 395, new NVIDIA RTX Spark, and data-center-class systems like NVIDIA DGX Station for Windows, developers now have access to unmetered, tiered AI capabilities tailored to specific needs, from everyday development to frontier-class tasks.Announcing Surface RTX Spark Dev Box available later this year
Surface RTX Spark Dev Box delivers GPU-first AI performance with the new NVIDIA RTX Spark silicon, providing 1 petaflop of AI compute[i] and 128GB of unified memory shared dynamically across CPU and GPU in a single memory address space. This hardware foundation is designed for model optimization, fine-tuning and large inference workloads. By making these workloads practical to run locally, it reduces reliance on cloud only workflows, helping avoid recurring token costs and usage spikes while keeping iteration fast and predictable. Surface RTX Spark Dev Box ships with developer optimized Windows 11 experience - preconfigured with all your essential developer tools - Visual Studio Code, GitHub Copilot available inline in Windows Terminal, WSL, PowerShell 7 and Windows settings tuned for development - so you spend less time configuring your machine and more time building from the moment you sign in. To learn more, check out the Devices blog. Surface RTX Spark Dev Box will be available later this year in the U.S. exclusively on Microsoft.com. Learn more at microsoft.com/devbox [ii]. https://www.youtube.com/watch?v=vzD4OvMIECMIntroducing DGX Station for Windows, available later this year
For decades, we have partnered with NVIDIA to bring the most powerful computing experiences to the world. DGX Station for Windows is the next step in a multi‑year journey to bring the full power of Windows and unlock breakthrough AI performance on the Windows platform. Building on the NVIDIA DGX Station™ system design, DGX Station for Windows is the ultimate deskside AI supercomputer bringing NVIDIA GB300 Grace Blackwell-class AI infrastructure directly into the Windows ecosystem — providing the compute needed to build, run and connect powerful AI agents to the applications and infrastructure Windows users already harness. It can run frontier AI models up to 1 trillion parameters locally.Stronger Windows security, reducing risk by default
Windows is strengthening its security foundation to reduce risk by default. New capabilities strengthen this foundation across key layers by reducing legacy risk, enforcing code trust and advancing cryptography. This raises the security bar at the platform level, protecting earlier in the lifecycle, not just after code runs.- Prepare your applications for a post-quantum world on Windows. Windows continues to expand post-quantum cryptography (PQC) support across the platform, broadening algorithm coverage and integrating it more deeply into the platform. This includes PQ hybrid key exchange in the Windows TLS stack, support for composite PQC algorithms through Windows cryptography APIs (CNG) and certificate functions, and PQ certificate issuance via Active Directory Certificate Services (ADCS). Read more here.
- Move away from legacy authentication to stronger, more secure defaults, reducing exposure to known attack paths. IAKerb and LocalKDC (in WIP Server and Client) are configurable via new registry keys, helping reduce NTLM usage and enable stronger Kerberos-based authentication across more scenarios. Read more here.
- Ensure only trusted drivers run on your device by default. Driver signing now follows a higher security bar with an updated certification process. Windows is moving toward Windows Hardware Compatibility Program (WHCP) certified drivers as the default, with a staged transition from audit to enforcement and stronger trust requirements over time. Read more here.
- Protect devices from untrusted apps without disrupting users. Smart App Control for consumers and App Control for Business are expanding in coverage across millions of devices, with stronger reputation-based enforcement, new integration APIs and policy-driven control for enterprise environments.