Audits

System Audits

The Windows Security Audit page runs local checks against important Windows security settings. No data is sent to external servers.

Checks performed

Check	What it verifies
Windows Defender Antivirus	Antivirus service enabled; reports engine and signature versions
Real-Time Protection	Defender RTP is active
User Account Control (UAC)	EnableLUA registry value is set
Windows Updates	Pending updates (0 pending = pass; any pending = warning)
BitLocker	Volume encryption status (informational on Home editions)
PowerShell Execution Policy	LocalMachine policy is Restricted, RemoteSigned, or AllSigned
Secure Boot	UEFI Secure Boot is enabled

Checks run concurrently. Progress events update the UI as each completes.

Result statuses

Status	Meaning
Pass	Setting meets the recommended configuration
Warn	Setting is suboptimal but not critical
Fail	Setting fails the security check
Info	Informational (e.g., BitLocker unavailable on edition)
Error	Check could not complete (permissions, cmdlet failure)

Ignoring warnings

Audit warnings appear on the Dashboard alongside other security warnings. You can:

• Ignore a warning if you accept the risk (stored locally).
• Restore an ignored warning to show it again.

Ignored audit warnings use IDs prefixed with audit:.

Running an audit

1. Open Windows Security Audit from the sidebar.
2. Click Run Audit.
3. Review each check and follow Windows guidance to fix failures.

Re-run the audit after making system changes to confirm improvements.