# HotCakeX/Harden-Windows-Security

Harden Windows Safely, Securely using Official Supported Microsoft methods and proper explanation | Always up-to-date and works with the latest build of Windows | Provides tools and Guides for Personal, Enterprise, Government and Military security levels | SLSA Level 3 Compliant for Secure Development and Build Process | Apps Available on MS Store✨

Repository: https://github.com/HotCakeX/Harden-Windows-Security
Canonical: https://ross.abutalabs.com/products/harden-windows-security
Homepage: https://hotcakex.github.io
Language: C#
License: MIT
License Family: permissive
Topics: defender, firewall-configuration, harden, security, security-hardening, windows11, bitlocker, encryption, tpm2, wdac, windows, windowsdefender, applicationcontrol, proactive, enterprise-security, 1st-party-security, operation-system-security, audit, compliance, intune
Last push: 2026-08-26T18:42:55+00:00

## Health v2 (maintenance only)
Score: 95/100 (v2, computed 2026-09-03T02:39:23.370411+00:00)
- activity 99, release rhythm 87, longevity 98
- inputs: {"age_days": 1380, "days_push": 7, "days_rel": 7, "gap_med": 2, "n_releases_24m": 218}
- flags: none
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 4668, forks 332 (observed 2026-08-28T04:08:56.539851+00:00)

## What it is
A suite of tools (Harden System Security app and AppControl Manager) that hardens Windows using only official, supported Microsoft methods, with guides for personal, enterprise, government, and military security levels. Built in C#, SLSA Level 3 compliant, and distributed via the Microsoft Store.

## Use cases
- harden windows 11 security safely
- configure wdac application control policies
- enable bitlocker and tpm-based encryption
- harden microsoft defender settings
- apply enterprise security baselines via intune
- lock down windows for government or military compliance
- remove unnecessary apps and features from windows

## When to choose
- you want to harden Windows using only official Microsoft-supported methods without third-party dependencies
- you need application control (WDAC) policy creation and management
- you need security hardening for personal, enterprise, or high-assurance environments
- you want an actively maintained, SLSA Level 3 compliant tool

## When to avoid
- you need to harden Linux or macOS systems
- you want third-party antivirus or security products
- you need a script-based tool rather than a GUI app from the Microsoft Store

## Facets
- artifact type: application
- maturity: active
- function: security, configuration-management, developer-tools
- domain: security, windows, self-hosted, privacy
- platform: windows, cross-platform
- tags: windows-hardening, wdac, bitlocker, microsoft-defender, intune, security-baseline, application-control, microsoft-store-app

## Member repositories
- HotCakeX/Harden-Windows-Security (main) score 95

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:08:56.539851+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-29T18:19:24.174694+00:00, confidence not recorded.
  - readme: https://github.com/HotCakeX/Harden-Windows-Security (fetched 2026-08-28T04:08:56.539851+00:00, sha c9a927851ff0)
  - homepage: https://hotcakex.github.io (fetched 2026-08-29T09:03:41.150308+00:00, sha 3a6c9a92370e)
- Data as of 2026-08-30T08:39:29.467469+00:00.