Hey Product Hunt 👋 I built Win11 Hardening because every hardening tool I tried sat at one of two extremes — consumer privacy toggles with no Defender / Firewall / ASR coverage, or Microsoft's Security Baseline GPO pack that's unusable on a non-domain home machine. Win11 Hardening sits in the middle. Plain-English UX for humans, enterprise-grade coverage under the hood. Every rule maps to a published baseline (CIS Win11 v3.0.0, MS Security Baseline 24H2, ANSSI), and you can verify each one against the source document. Three things I'd love your reaction to: 1. It's reversible. Per rule. From the GUI. One click. 2. It re-tests itself after applying. If a rule didn't actually take effect, automatic rollback. No silent partial states. 3. It catches Windows Update drift — a scheduled task re-runs your rules after each cumulative update and banners you on next boot if Microsoft re-enabled something. I haven't seen another Windows hardening tool do this. Stack: Go 1.26 + Wails 2 + PowerShell 5.1. 98 Pester + 100+ Go tests, property-based + fuzz + gosec in CI. Reproducible build, SHA256 published. 100% local — zero network call at runtime. WTFPL license. EN / FR. Honest comparison vs. O&O ShutUp10++, Privatezilla, ChrisTitus WinUtil and MS Baseline is in the README — happy to discuss where it's weaker. Would love feedback on the manifest format, the drift-detection model, and what to prioritize next (BitLocker / TPM coverage is where ANSSI is 0currently thin).

Win11 Hardening

Secure your Windows 11 in 3 clicks. No CLI. Nothing breaks.

Secure your Windows 11 in 3 clicks. No CLI. Nothing breaks.