Hardening baselines for Windows based on CIS Benchmark, NIST 800-53, and Microsoft Security Baselines. Four protection levels — pick the one that fits your environment and apply it with the framework script.
Basic protection for workstations and small businesses. Includes fundamental authentication, firewall, Windows Update, and essential service controls. Perfect starting point for your security journey.
Advanced protection for servers and corporate environments. Includes SMB signing, LSA Protection, PowerShell logging, and complete Windows Defender configuration. Recommended for most environments.
Maximum hardening profile for regulated environments. Strictest control set — validate operational impact before applying.
Official Skyfort baseline for Windows 11: CIS Control L1 consolidated (407 controls, INF + HardenedPaths). The standard package applied by the portal for Windows 11 machines.
Download the baseline package above, then apply it with the matching script. Requires an elevated PowerShell session.