Advanced Plus Security Sampei Nihira Security Config 2026

[Sampei.Nihira]

Yes. But you are from Italy the land of the holy trinity, so I thought you would favor 3. In my experience it is 0-1-4-2-3 in terms of blocking scope. But I will look it up again.

It shouldn't be the way you say, considering that 4 is the recommended level:

Chrome Enterprise Policy List & Management | Documentation

Try asking the AI for a different opinion than mine.

 

[Sampei.Nihira]

I ran a quick test with this URLHaus malware, whose download was blocked by the policy I set in Brave DownloadRestrictions = 4, as indicated by the red arrow:





At the time of the test, the malware had been on the list for 18' and was not being blocked by NextDNS, as shown in the image I included.
At 54', NextDNS also blocked the malware.

 

[Sampei.Nihira]

Reinstalled Download Sentinel extension in Brave.
False Positive Reduction = Low
Silent when probably safe = disabled
8 Trusted Domains.

 

[Sampei.Nihira]

I've enabled these flags in Brave:

• Sanitize URLs in the clipboard
• Suspicious Site Warnings
• Bundled Security Settings

The last flag I added to the post is the most interesting one because it allows you to enable Secure Protection - Enhanced:

brave://settings/security

Even though I selected Enhanced - Brave Safe Browsing after refreshing the settings page, still remains at the Standard level for me.



P.S.

Be sure to set JavaScript Protection back to the Standard level, as it may slow down your PC when visiting certain websites.

P.S.1

The “Bundled Security Settings” flag is no longer available.

 

[lokamoka820]

The last flag I added to the post is the most interesting one because it allows you to enable Secure Protection - Enhanced:

brave://settings/security
Even though I selected Enhanced - Brave Safe Browsing after refreshing the settings page, still remains at the Standard level for me.

As far as I can tell, "Secure Protection - Enhanced" is exclusive to Google Chrome; I suppose brave disables it since it lacks an equivalent feature.

 

[oldschool]

As far as I can tell, "Secure Protection - Enhanced" is exclusive to Google Chrome

Indeed it is.

 

[Sampei.Nihira]

As far as I can tell, "Secure Protection - Enhanced" is exclusive to Google Chrome; I suppose brave disables it since it lacks an equivalent feature.

In fact, as you can see from the screenshot, the solution is a bit “confusing.”
I keep this setting at the Enhanced level.

If nothing else, the second flag increases the level of protection, even at the risk of a slight increase in FP.
On the other hand, the first flag that is set affects privacy settings

 

[Sampei.Nihira]

Here are 4 cases in which various download protection mechanisms intervene to block malicious executables or alert the user about them:

Microsoft Defender:




DownloadRestrictions policy = 4:




Download Sentinel extension for Brave:




NextDNS blocks the download link:






Note that these specific domains are not blocked by any of the DNS listed on the URLhaus page.

More generally, links to malware, phishing, or scam content can be blocked by my NextDNS or Google Safe Browsing.
I hope this is interesting to some forum members.
I'm really satisfied.

P.S.

Please note that these are download tests.
Not malware tests,there is no interaction with malicious files.

 

[Sampei.Nihira]

Enabled:

• Rust-based ChildProcessSecurityPolicy - Rust only (with ProcessState)

flag on Brave.