1. A computer-implemented method for grouping a plurality of applications together in a container, the computer-implemented method comprising: determining that each amended application included in a plurality of amended applications are permitted to exchange data with one another, each amended application having a target application embedded therein, each amended application having an individual associated policy defining requirements on exchanging data with the embedded target application, the determination based on the individual associated policies for each amended application, relative to one another, enforcing similar requirements on exchanged data; based at least on the determination that each amended application in the plurality of amended applications are permitted to exchange data with one another, grouping the embedded target applications together in a container, the grouping comprising, for each amended application in the plurality of amended applications: updating the associated policy to provide the corresponding embedded target application with increased privileges to exchange data with the other corresponding embedded target applications; and isolating the container from at least one other application by restricting the at least one other application from exchanging data with any of the embedded target applications.