Advanced Security pytroman86's PC Security Config

Notes by Staff Team
  1. This setup configuration does not have a backup plan. We strongly recommend to add a backup solution for your data so that you can restore it in the case of an emergency.
    Backing up allows the recovery of data that has been lost due of a malware attack (eg. ransomware) or a hard disk crash. In such events you might lose family photos, your music collection, documents, or financial data. Backups are fast and simple to perform so it should be done on a regular basis.

Archived configuration (not current) · expand details
Thread details
Last updated
Jul 10, 2026
Main use of this computer
For home and private use
Operating system
Windows 11
On-device encryption
Not applicable
Device sign-in security
    • Windows Hello PIN or biometric sign-in (face / fingerprint / Touch ID)
Security updates
Allow security updates and latest features
Update channels
Allow stable updates only
User Account Control (UAC)
Always notify
Smart App Control
On
Network firewall
Enabled
Real-time protection
WD without antiransomware (too many false positive) + WHHLight
Device firewall
Microsoft Defender Firewall with Advanced Security
Custom security settings
+ Safing Portmaster (free)
Periodic malware scanners
Malwarebytes (free)
Malware sample testing
I do not participate in malware testing
Environment for malware testing
N/A
Browsers and extensions
Firefox (AutoTabDiscard, BetterRYM, CheckerPlus for Gmail, Dark Reader, Bitwarden, Grammalecte, IDM Module, Keepa, Notesnook, NX Enhanced, uBlock Origin, Violentmonkey)

Helium (AutoTabDiscard, Bitwarden, IDM Module, Notesnook, uBlock Origin)
Secure DNS
NextDNS profile
Desktop VPN
N/A
Password and passkey manager
Bitwarden
File and photo backups
Amazon Photos, Filen.io, Proton, Google Drive
Subscriptions
    • None
System recovery
Restore Point
Usage and exposure
    • Visiting familiar websites
    • Visiting unknown or untrusted websites
    • Working from home
    • Logging into my bank account
    • Downloading software and files from reputable sites
    • Streaming audio/video content from trusted sites or paid subscriptions
    • Coding and development
Computer specs
CPU : AMD Ryzen 5 5600G 3.9 GHz 6-Core,
CM : MSI B550M PRO VDH WiFi,
RAM : G.Skill 16 GB (2 x 8 GB) DDR4-3200,
SSD (system) : 1 To M.2 NVMe Samsung 990 EVO Plus,
SSD (secondary) : 1 To M.2 NVMe Crucial P3 Plus,
HDD (storage): 1 To WD 2,5',
AIO : be quiet! Pure Base 500 ATX,
PSU : SeaSonic FOCUS GX 650 W 80+ Gold -
Cooler : Thermalright Peerless Assassin 120 SE V3 (juil. 2026)
Feedback preference

Detailed suggestions and alternatives welcome

Notes by Staff Team
  1. This setup configuration does not have a backup plan. We strongly recommend to add a backup solution for your data so that you can restore it in the case of an emergency.
    Backing up allows the recovery of data that has been lost due of a malware attack (eg. ransomware) or a hard disk crash. In such events you might lose family photos, your music collection, documents, or financial data. Backups are fast and simple to perform so it should be done on a regular basis.

Is fort firewall conflicting with privacy?
No, I didn't mean that there was a privacy issue with the Fort firewall, but Portmaster is more of a privacy tool than a regular firewall. It has a secure DNS and built-in ad/tracker filters, so for example, it will block Microsoft Edge tracking data without affecting the update process and without any manual configuration from the user. That's what I meant.
 
I would recommend adding CyberLock to your arsenal. It is a default deny layer. Everything that runs that is new is scrutinized and the AI then makes a security recommendation whether to keep or block. So you will be made aware that someone is attempting to run something and can take action.
 
Last edited:
I use external HDD's too. Because it is a little cheaper and should last longer too. But I am contemplating SSD's because I bring the external HDD's with me (as off site backup ) and it gets banged and tossed about.
Thankfully I managed get a shockproof silicone case for my external HDD and I dropped it many times. It is working without any issues.

In the past few month, the prices of SSDs in Egypt skyrocketed. Very unreasonable prices. I am not sure if other markets are the same.
 
Windows Defender without anti-ransomware + WHHLight (without WDAC) + Safing Portmaster (free)... Will this break Windows 11?

Home use only...

Is this enough?

I often use a personal NextDNS profile in Portmaster...

And that's more than enough for me...

Since my Windows 11 is experiencing app and process crashes (Pano scrobbler, Spotify, Rainmeter, Calibre, AIDA64, Portmaster, Explorer.exe, LightBulb...), I'm wondering what to install during my next clean install...

Already posted here: Serious Discussion - WHHLight - simplified application control for Windows Home and Pro.

abrupt shutdowns and restarts without blue screens...
I can't figure out exactly what's causing my problems...!

Thanks!
 
Last edited:
pytroman86's PC Security Config · Setup v5
Updated Oct 4, 2026

What changed
  • Periodic malware scanners: Malwarebytes (free) → Malwarebytes (free) / SIriusLLM
  • Feedback preference: Older selection — review required → Detailed suggestions and alternatives welcome
  • OS version and support details: Not specified → 25H2 26200.9550
  • On-device encryption: Older selection — review required → Not sure
  • Usage and exposure: Older selection — review required → Visiting familiar websites, Downloading files from unknown or untrusted sources
My current setup
  • Operating system: Windows 11
  • OS version and support details: 25H2 26200.9550
  • Real-time protection: WD without antiransomware (too many false positive) + WHHLight
  • File and photo backups: Amazon Photos, Filen.io, Proton, Google Drive
  • Device firewall: Microsoft Defender Firewall with Advanced Security
  • Browsers and extensions: Firefox ( AutoTabDiscard, BetterRYM, CheckerPlus for Gmail, Dark Reader, Bitwarden, Grammalecte, IDM Module, Keepa, Notesnook, NX Enhanced, uBlock Origin, Violentmonkey )

    Helium ( AutoTabDiscard, Bitwarden, IDM Module, Notesnook, uBlock Origin)
  • Main use of this computer: For home and private use
  • On-device encryption: Not sure
  • Security updates: Allow security updates and latest features
  • Update channels: Allow stable updates only
  • User Account Control (UAC): Always notify
  • Smart App Control: On
  • Network firewall: Enabled
  • Custom security settings: + Safing Portmaster (free)
  • Periodic malware scanners: Malwarebytes (free) / SIriusLLM
  • Malware sample testing: I do not participate in malware testing
  • Environment for malware testing: N/A
  • Secure DNS: NextDNS profile
  • Desktop VPN: N/A
  • Password and passkey manager: Bitwarden
  • Subscriptions: None
  • System recovery: Restore Point
  • Usage and exposure: Visiting familiar websites, Downloading files from unknown or untrusted sources
  • Computer specs: CPU : AMD Ryzen 5 5600G 3.9 GHz 6-Core,
    CM : MSI B550M PRO VDH WiFi,
    RAM : G.Skill 16 GB (2 x 8 GB) DDR4-3200,
    SSD (system) : 1 To M.2 NVMe Samsung 990 EVO Plus,
    SSD (secondary) : 1 To M.2 NVMe Crucial P3 Plus,
    HDD (storage): 1 To WD 2,5',
    AIO : be quiet! Pure Base 500 ATX,
    PSU : SeaSonic FOCUS GX 650 W 80+ Gold -
    Cooler : Thermalright Peerless Assassin 120 SE V3 (juil. 2026)
  • Feedback preference: Detailed suggestions and alternatives welcome
Feedback on this setup is welcome.
 

Recently browsing

Members who viewed this thread in the last 5 minutes

Back
Top