WinSystemHarden is a free Windows 10 and 11 utility that applies 29 security rules inspired by CIS Benchmarks and NSA guidance. It is not certified or endorsed by either. There is no license key, no machine code and no sign-up, it works offline and the page says it has no telemetry.
Choose a Standard, Deep or Custom plan, then harden with one click. Examples include disabling SMBv1 and closing high-risk ports. One-click rollback lets you revert changes, and you can roll back to any time point if a legacy app stops working. The download is listed on the vendor's free-tools page with a setup exe, a PDF guide and a SHA-256 hash.
WinSystemHarden was built because many hardening scripts change a system and offer no way back. The builder made rollback the first feature so people can apply strict rules and undo them if something breaks.