Harden-Windows
One-command Windows 10/11 hardening with 18 modules, 4 profiles, allow-lists, rollback & dry-run
Production-grade Windows hardening suite. STIG-style mitigations with interactive profiles, allow-list engine, full rollback, and SHA-256 verified bootstrap installer.
This tool is free and open source. Support the developer:
Sponsor neohiro on GitHub