CISO Security Auditor

Checks if your Windows machine is secure. Tells you what's broken. Fixes some of it.

Who is this for?

• Freelance IT consultants — you set up machines for clients, you need to show "it's secure"
• Small business owners — you have 5-50 machines, no IT dept, you need to prove security to your insurer or auditor
• Homelab hobbyists — you run Windows VMs, you want to harden them and see your score improve
• IT helpdesk — you get a machine, you need a quick green/red light before deploying it

If you have a big security team with Nessus and CrowdStrike, this isn't for you. This is for people who need a quick answer without spending $10K/year on enterprise tools.

What it does

Runs 100 security checks and gives you a score out of 100%. That's it.

python main.py

No install. No config. Just run it.

What you get

• A score: "Your machine is 30% secure"
• A list of what's broken and how to fix it
• 15 things fixed automatically with one click
• A report you can show your boss, client, or auditor

What it doesn't do

• It's not antivirus
• It doesn't monitor anything in the background
• It doesn't fix everything (85 of 100 checks need manual work)
• It won't make your machine secure — it just tells you what's wrong

The loop that makes this useful

1. Run it → get a score
2. Fix some things
3. Run it again → see score improve
4. Show the improved report to someone
5. Feel good

Without scan history and trend tracking, there's no reason to run it twice. That's what we're building next.

Features

• 100 security checks across 8 domains
• Dark theme (doesn't burn your eyes)
• Search bar to find checks fast
• Collapse/expand categories
• Right-click menu (copy, fix, undo)
• Export: HTML, JSON, CSV, PDF, PowerShell script
• Undo everything if you mess up
• Zero dependencies — just Python

Safety

Every fix is reversible:

1. Creates a System Restore Point before touching anything
2. Backs up every registry key it changes
3. UNDO button reverts everything
4. Won't let you fix things without admin rights
5. Asks "are you sure?" before every fix

Requirements

• Windows 10 or 11
• Python 3.8+
• Admin rights (only for fixes — scanning works without)

What's in the box

File	What it does
main.py	The app — runs the scan, shows results
auditor_core.py	The engine — 100 checks, 15 fixes
export_report.py	Makes reports (HTML, JSON, CSV, PDF, PS1)

What it checks

#	Category	Auto-fix?
1-10	Boot & Firmware (Secure Boot, TPM, BitLocker)	No
11-20	OS Exploit Protections (ASLR, DEP, CFG, LSA)	LSA
21-40	Persistence (Scheduled Tasks, Registry, Services)	No
41-50	Identity (UAC, NTLM, SMB Signing, Passwords)	UAC, NTLM, SMB
51-65	Network (Firewall, DNS, NetBIOS, SMBv1)	SMBv1
66-75	Execution (PowerShell, AppLocker, SmartScreen)	PS Policy, Logging
76-85	Files (NTFS, Shadow Copies, Memory Dumps)	Clipboard
86-100	Logging (Audit Policy, Defender, ASR, CFA)	CmdLine, Telemetry, Defender

What's coming next

Version	What	Why
v1.2	.exe bundle + scan history + score trend	So people without Python can use it, and there's a reason to run it again
v1.3	Multi-machine mode + better PDF reports	So consultants can scan 10 machines and show professional reports
v2.0	Scheduled scans + email alerts + CIS mapping	So it runs automatically and tells you when things change

See docs/ROADMAP.md for details.

Docs

Doc	What it is
PDR.md	What we're building and why
ARCHITECTURE.md	How the code is structured
TECH_STACK.md	Why we chose what we chose
DESIGN.md	UI/UX decisions
ROADMAP.md	What's coming next
PROJECT_PLAN.md	Timeline and milestones
SECURITY.md	Safety and reversibility