Score · Interactive tool

Windows Hardening Score

How locked down are your Windows machines, really? Rate six common hardening surfaces to get a hardening score - and a clear list of what to tighten next.

Hardening isn't one switch - it's a set of surfaces users can otherwise reach: command-line and scripting tools, removable storage, Control Panel and Settings, software installation, built-in admin tools, and the desktop itself.

For each surface, tell us how far the control reaches today. The score reflects consistency across the fleet, not just whether it's possible on one machine. Everything is calculated in your browser.

1. Command-line & scripting tools (Command Prompt, PowerShell, Registry Editor)

How far does your control over these reach?

  • No control - anyone can open them
  • Locked on a few machines
  • Locked on most machines
  • Enforced fleet-wide by policy
2. USB & removable storage
  • No control - any drive works
  • Controlled on a few machines
  • Controlled on most machines
  • Enforced fleet-wide by device class
3. Control Panel & Settings pages

Are users limited to only the settings they need?

  • Fully open
  • Restricted on a few machines
  • Restricted on most machines
  • Restricted to a curated set fleet-wide
4. Installing new software

Can standard users install their own applications?

  • Yes, freely
  • Blocked on a few machines
  • Blocked on most machines
  • Blocked fleet-wide; only approved apps run
5. Built-in admin tools (Task Manager, MMC snap-ins like gpedit / lusrmgr)

Restricted where users shouldn't reach them?

  • All available to everyone
  • Restricted on a few machines
  • Restricted on most machines
  • Restricted fleet-wide where appropriate
6. Desktop & Explorer surfaces (context menu, drives, network locations)
  • Default Windows, nothing locked
  • Tweaked on a few machines
  • Locked on most machines
  • Locked to your standard fleet-wide

This is a quick self-assessment, not a formal security audit. Your answers and score stay in your browser - nothing is sent to a server or saved.

Complete the questions above to calculate your hardening entirely in your browser.