What it means
Enhanced security in Edge adds protection against some memory-related vulnerabilities by changing script execution and using operating-system mitigations. Balanced focuses on unfamiliar or less frequently visited sites, aiming to keep most everyday pages working. Strict applies the extra protection to all sites by default, making breakage more likely. Neither setting is the same as SmartScreen reputation filtering, anti-malware software or a guarantee that a page is honest.
A real-world example
A frequently used payroll portal works under Balanced because Edge does not add the strict restrictions there, but its upload widget fails under Strict. The user narrows a site-specific exception after confirming the portal's real address rather than disabling enhanced security everywhere.
What to do
Begin with Balanced, check the Added security indicator and test essential sites. If you need Strict, document exceptions, limit them to exact trusted sites and review them later. Keep Edge updated either way.
The distinction that matters
An exception can be set to always use or never use enhanced security on a site. A site that works under Balanced is not automatically safe, and one that breaks under Strict is not automatically malicious. Compatibility and trust are separate questions. Tracking prevention also has Balanced and Strict labels, but it addresses trackers rather than this exploit mitigation.
Microsoft Edge enhanced security
