You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
This commit was created on GitHub.com and signed with GitHub’s verified signature.
Fix it, for every finding. Each finding now carries step-by-step instructions in plain English. Firmware steps are written for this PC: the engine reads the make, model, board, BIOS vendor, firmware mode (UEFI/legacy), system-disk style (GPT/MBR) and Secure Boot state, and "Secure Boot is OFF" tells you the exact key to tap (Del on an ASUS desktop, F2 on a Dell, F10 on HP, F1/F2 on Lenovo, Volume-Up on a Surface…), the Settings route into UEFI, the menu path for that vendor, the save key, and the extra MBR→GPT step when the disk needs it.
One-click safe fixes with undo. Where a fix can be done safely from Windows, the Fix panel offers Apply safe fix: disable a scheduled task, remove a startup entry, restore Winlogon/IFEO/policy values, quarantine a dropped file or startup item, strip injected arguments from a browser shortcut, stop and disable a service, stop a miner process, remove a WMI consumer (backed up first), remove Defender exclusions, turn Defender real-time/behavior/script/cloud protection back on, remove planted Defender policies, turn UAC back on, turn off test-signing, disable SMBv1, re-enable core services, turn on memory integrity, disable Remote Registry, remove rogue root certificates (exported first), disable hidden/Guest/Administrator accounts and remove login-screen hiding, turn Remote Desktop off or require NLA, reset DNS to automatic, turn off proxies and PAC scripts, remove port-forwarding rules, disable suspicious firewall rules, turn firewall profiles on, stop over-shared folders, remove hosts-file lines that block security sites. Every fix is confirmed first, logged under Fix history, and reversible with one click. Scanning stays read-only.
What changed since last scan. Each scan is compared with the previous one: NEW and CHANGED findings are tagged in the list (new CHANGE column, "New since last scan" filter) and in every report, resolved items are listed, and inventory growth (a new program, a new service) is called out. Scheduled scans now alert on anything new at Medium or above, not only on RED/ORANGE.
Live detection lists.signatures.json is published with every release and refreshed at every start; new miner/proxyware/remote-tool names go out without a new app version (Publish.cmd -SignaturesOnly). Reports show the signature version.
Accounts and the web dashboard.Account in the header: create a free account or sign in; each report is uploaded (opt-out) to a dashboard that shows every PC, its verdict history and the full report. Scheduled scans, email alerts and "PC has gone quiet" alerts are the Watch plan ($29/year or $3.99/month, 14-day free trial). Stripe checkout and customer portal from the app and the dashboard. Nothing leaves a PC that is not signed in.
Automatic scans can now run every day as well as weekly.
Detail pane is structured (title, severity and category chips, WHY IT MATTERS, EVIDENCE) with Fix it… and Copy finding; the shield shows a check mark when protected and an exclamation mark when something needs attention; the list and detail pane share space proportionally and the window sizes itself to the screen.
Hardware summary (make, model, firmware) in the System summary and the report header.
