I used to have a hardening script for years, but now AI made it easy to convert my hardening script into an app. It's beyond just a few settings - all of the ones in the recommended profile are battle-tested (I used to work in Microsoft's security consulting division in the Middle East). Feedback is welcome, I promise to take into account and fix all issues reported here. Here's the official description: Most hardening tools overcorrect. Blindly applying a full DISA STIG to a personal or power-user machine wrecks it: it disables your password manager, kills InPrivate, turns on Controlled Folder Access that blocks your own apps, and demands a BitLocker PIN on every boot, all for compliance checkboxes that add little real security. AtlantHarden v2.0 is built around a smarter idea: stop how malware and attackers actually get in and run, and skip the friction that does not stop them. Comprehensive when you want it with the Maximum profile, sensible by default with Recommended. Every change is backed up automatically and fully reversible. Features 579 hardening settings across registry, PowerShell, firewall, file associations, audit policy, and ASR rules 354 DISA STIG controls across Windows 11 (V2R7), Edge (V2R5), Chrome (V2R11), Firefox (V6R7), and Office 365 ProPlus (V3R5) 34 ACSC Essential Eight settings (July 2024) with live compliance scoring 3 one-click profiles: Basic (95 settings), Recommended (318), and Maximum (579), each fully reviewable before apply Recommended profile is gaming and performance safe and leaves your password manager, InPrivate, and history working 19 Attack Surface Reduction rules blocking Office macros, ransomware, credential theft, and script droppers LOLBin firewall rules blocking certutil, mshta, wscript, regsvr32, and wmic from the network File association neutralization opening dangerous script types (.js, .vbs, .hta, .scr) as text Browser hardening across Edge, Chrome, and Firefox simultaneously PowerShell logging triad: script block + module + transcription Registers itself as allowed for ASR and Controlled Folder Access so it never locks you out Full backup with automatic pre-change snapshot, .reg export, and System Restore integration Silent deployment via CLI for enterprise fleets, plus configuration import and export One-click HTML security report with STIG and ACSC compliance metrics If the mods allow it, I'll add a download link in here - else, just google "Atlant Harden" https://atlantsecurity.com/downloads/atlant-harden P.S. As this is free, I hope I am not breaking the no spam and no advertising rules   submitted by   /u/xorredd [link]   [comments]