Hypervisor-protected Code Integrity, or HVCI, is Microsoft’s technical name for memory integrity. It uses the Windows hypervisor and Virtualization-based Security (VBS) to isolate part of the kernel trust model and enforce stronger code integrity rules for kernel-mode components, especially drivers. In practice, HVCI helps ensure that only properly signed and compatible code can run in sensitive kernel areas.
HVCI matters because attackers often target the kernel to gain deep control over a system. Malicious drivers, kernel exploits, and memory tampering become harder when code execution and integrity checks are backed by hardware-assisted isolation. Defenders use HVCI to reduce the attack surface on endpoints, but it can also expose compatibility problems: older or poorly written drivers may fail to load, so organizations often test hardware and software carefully before enabling it broadly.