A fresh Windows 11 in 2026 still ships with SMBv1, NTLMv1, WPAD and Defender ASR off. Win11 Hardening is an open-source GUI that explains every security setting in plain English, applies them in one click, and rolls back automatically if a rule didn't take effect. Mapped to CIS, Microsoft Security Baseline and ANSSI. Detects when Windows Update silently re-enables your settings. Reversible per rule. 100% local. Stack: Go + Wails + PowerShell. WTFPL. EN / FR.
