About
WinSystemHarden is a free, offline system hardening tool for Windows 10 and 11. It applies 32 hardening rules based on CIS Benchmarks and NSA guidelines to close high-risk ports, disable vulnerable services, and tighten system configurations.
Three hardening plans are included: Standard, Deep, and Custom. If anything breaks, one-click rollback restores your system to any previous restore point. No cloud, no telemetry, no sign-up required.
Everything runs locally — your system details never leave your machine.
Fact Sheet
Discussion
Basing the rules on CIS Benchmarks and NSA guidance gives the hardening a solid footing, and one-click rollback to a restore point is what makes it safe to try the Deep plan. Running fully offline with no telemetry fits a security tool well.