WinSystemHarden

WinSystemHarden is a free, offline system hardening tool for Windows 10 and 11. It applies 29 hardening rules inspired by CIS Benchmarks and NSA guidelines — closing high-risk ports, disabling vulnerable services, and tightening system configurations. Three plans available: Standard (20 items), Deep (29 items), Custom. If anything breaks, one click rolls it all back to a previous restore point.