Advanced Security RoxasDev's PC Security Config

Layout
Current configurationWindows 11
Revision 5Updated
Jump to discussion
Detailed suggestions and alternatives welcomeWhat changed
Staff assessment Advanced Security

harlan4096 · · Revision 5

Device & operating system2
Operating system
Windows 11
OS version and support details
26H2
Protection & updates13
Real-time protection
Microsoft Defender, ThreatDown EDR, KeyScrambler Premium
Device firewall
Microsoft Defender Firewall
On-device encryption
Windows BitLocker / Device Encryption
Device sign-in security
Hardware security key, Windows Hello PIN or biometric sign-in (face / fingerprint / Touch ID), Automatic sign-in / no sign-in required
Security updates
Check for updates and Notify
Update channels
Allow stable updates only
User Account Control (UAC)
Notify me only when programs try to make changes to my computer
Smart App Control
On
Network firewall
Enabled
Router and network details
Linksys WRT1900ACS running OpenWrt 25.12.5, with advanced firewall and network filtering rules.
Periodic malware scanners
Malwarebytes, ESET Online Scanner, AdwCleaner, ZHPCleaner
Malware sample testing
I participate in malware testing; details below
Environment for malware testing
RxCloud CyberLab — isolated virtual machines dedicated to malware analysis and security research. Test environments are segmented from my personal network and everyday devices, with controlled network access, automated VM restoration, and dedicated monitoring/telemetry.
Browser & privacy5
Browsers and extensions
Brave (Shields enabled), uBlock Origin
Secure DNS
OpenDNS
Desktop VPN
VPN managed by my router via WireGuard
Password and passkey manager
My brain
Two-factor authentication
Microsoft Authentificator
Backup & recovery2
File and photo backups
Veeam, MEGA
System recovery
Veeam
Device & usage5
Main use of this computer
For home and private use
Subscriptions
Apple iCloud+ 200GB, Other subscription
Usage and exposure
Gaming, Gaming with third-party mods, Coding and development
Computer specs
Custom-built Desktop PC — Intel Core i9-9900K, NVIDIA GeForce RTX 5060 Ti 16 GB, 32 GB RAM, 512 GB NVMe SSD + 1 TB SSD + 2×2 TB HDD
Feedback preference
Detailed suggestions and alternatives welcome
Community rating

Community rating

How members rate the shared configuration. This is community feedback, not a security test.

Not rated yet
An open invitation for useful feedback.

Sign in to rate this setup

Go to discussion

Shared by the member. This is a configuration record, not a device scan.

Archived configuration (not current) · expand details
Thread details
Last updated
Oct 7, 2026
Main use of this computer
For home and private use
Operating system
Windows 11
OS version and support details
26H2
On-device encryption
Windows BitLocker / Device Encryption
Device sign-in security
    • Hardware security key
    • Windows Hello PIN or biometric sign-in (face / fingerprint / Touch ID)
    • Automatic sign-in / no sign-in required
Security updates
Check for updates and Notify
Update channels
Allow stable updates only
User Account Control (UAC)
Notify me only when programs try to make changes to my computer
Smart App Control
On
Network firewall
Enabled
Router and network details
Linksys WRT1900ACS running OpenWrt 25.12.5, with advanced firewall and network filtering rules.
Real-time protection
Microsoft Defender
Device firewall
Microsoft Defender Firewall
Periodic malware scanners
Malwarebytes, ESET Online Scanner, AdwCleaner, ZHPCleaner
Malware sample testing
I participate in malware testing; details below
Environment for malware testing
RxCloud CyberLab — isolated virtual machines dedicated to malware analysis and security research. Test environments are segmented from my personal network and everyday devices, with controlled network access, automated VM restoration, and dedicated monitoring/telemetry.
Browsers and extensions
Brave (Shields enabled), uBlock Origin
Secure DNS
OpenDNS
Desktop VPN
VPN managed by my router via WireGuard
Password and passkey manager
My brain
Two-factor authentication
Microsoft Authentificator
File and photo backups
Veeam
Subscriptions
    • Apple iCloud+ 200GB
    • Other subscription
System recovery
Veeam
Usage and exposure
    • Gaming
    • Coding and development
Computer specs
Custom-built Desktop PC — Intel Core i9-9900K, NVIDIA GeForce RTX 5060 Ti 16 GB, 32 GB RAM, 512 GB NVMe SSD + 1 TB SSD + 2×2 TB HDD
Feedback preference

Detailed suggestions and alternatives welcome

RoxasDev

Level 5
Verified
Developer
Well-known
Forum Veteran
Published snapshot Revision 1 View current setup This post records an earlier version. Open the current setup for the latest details.
RoxasDev's PC Security Config · Setup v1
Updated Oct 7, 2026

My current setup
  • Operating system: Windows 11
  • OS version and support details: 26H2
  • Real-time protection: Microsoft Defender
  • File and photo backups: Veeam
  • Device firewall: Microsoft Defender Firewall
  • Browsers and extensions: Brave (Shields enabled), uBlock Origin
  • Main use of this computer: For home and private use
  • On-device encryption: Windows BitLocker / Device Encryption
  • Device sign-in security: Hardware security key, Windows Hello PIN or biometric sign-in (face / fingerprint / Touch ID), Automatic sign-in / no sign-in required
  • Security updates: Check for updates and Notify
  • Update channels: Allow stable updates only
  • User Account Control (UAC): Notify me only when programs try to make changes to my computer
  • Smart App Control: On
  • Network firewall: Enabled
  • Router and network details: Linksys WRT1900ACS running OpenWrt 25.12.5, with advanced firewall and network filtering rules.
  • Periodic malware scanners: Malwarebytes, ESET Online Scanner, AdwCleaner, ZHPCleaner
  • Malware sample testing: I participate in malware testing; details below
  • Environment for malware testing: RxCloud CyberLab — isolated virtual machines dedicated to malware analysis and security research. Test environments are segmented from my personal network and everyday devices, with controlled network access, automated VM restoration, and dedicated monitoring/telemetry.
  • Secure DNS: OpenDNS
  • Desktop VPN: VPN managed by my router via WireGuard
  • Password and passkey manager: My brain
  • Two-factor authentication: Microsoft Authentificator
  • Subscriptions: Apple iCloud+ 200GB, Other subscription
  • System recovery: Veeam
  • Usage and exposure: Gaming, Coding and development
  • Computer specs: Custom-built Desktop PC — Intel Core i9-9900K, NVIDIA GeForce RTX 5060 Ti 16 GB, 32 GB RAM, 512 GB NVMe SSD + 1 TB SSD + 2×2 TB HDD
  • Feedback preference: Detailed suggestions and alternatives welcome
Feedback on this setup is welcome.
 
From the setup owner View current setup
Comment on setup v2The setup has been updated since this version.
My only suggestion: set UAC to Always notify :)

Thanks for the suggestion! :)

I actually used Always notify for a while, but with the amount of development and administrative work I do on this machine, I found it a little too intrusive for my daily workflow. 😭

So I eventually went back to the default UAC level as a compromise between security and usability. But I definitely agree that Always notify is the stronger option from a security perspective. :D
 
Published snapshot Revision 5 View current setup
RoxasDev's PC Security Config · Setup v5
Updated Oct 17, 2026

What changed
  • Real-time protection: Microsoft Defender → Microsoft Defender, ThreatDown EDR, KeyScrambler Premium
  • File and photo backups: Veeam → Veeam, MEGA
  • Usage and exposure: Gaming, Coding and development → Gaming, Gaming with third-party mods, Coding and development
My current setup
  • Operating system: Windows 11
  • OS version and support details: 26H2
  • Real-time protection: Microsoft Defender, ThreatDown EDR, KeyScrambler Premium
  • File and photo backups: Veeam, MEGA
  • Device firewall: Microsoft Defender Firewall
  • Browsers and extensions: Brave (Shields enabled), uBlock Origin
  • Main use of this computer: For home and private use
  • On-device encryption: Windows BitLocker / Device Encryption
  • Device sign-in security: Hardware security key, Windows Hello PIN or biometric sign-in (face / fingerprint / Touch ID), Automatic sign-in / no sign-in required
  • Security updates: Check for updates and Notify
  • Update channels: Allow stable updates only
  • User Account Control (UAC): Notify me only when programs try to make changes to my computer
  • Smart App Control: On
  • Network firewall: Enabled
  • Router and network details: Linksys WRT1900ACS running OpenWrt 25.12.5, with advanced firewall and network filtering rules.
  • Periodic malware scanners: Malwarebytes, ESET Online Scanner, AdwCleaner, ZHPCleaner
  • Malware sample testing: I participate in malware testing; details below
  • Environment for malware testing: RxCloud CyberLab — isolated virtual machines dedicated to malware analysis and security research. Test environments are segmented from my personal network and everyday devices, with controlled network access, automated VM restoration, and dedicated monitoring/telemetry.
  • Secure DNS: OpenDNS
  • Desktop VPN: VPN managed by my router via WireGuard
  • Password and passkey manager: My brain
  • Two-factor authentication: Microsoft Authentificator
  • Subscriptions: Apple iCloud+ 200GB, Other subscription
  • System recovery: Veeam
  • Usage and exposure: Gaming, Gaming with third-party mods, Coding and development
  • Computer specs: Custom-built Desktop PC — Intel Core i9-9900K, NVIDIA GeForce RTX 5060 Ti 16 GB, 32 GB RAM, 512 GB NVMe SSD + 1 TB SSD + 2×2 TB HDD
  • Feedback preference: Detailed suggestions and alternatives welcome
Feedback on this setup is welcome.
 

Recently browsing

Members who viewed this thread in the last 5 minutes

Back
Top