← All Documentation

Security Audit

A one-page checkup of all the built-in Windows security features and which are actually on.

What it does

Windows ships with half a dozen protective features, but they're scattered across different settings screens. Security Audit reads the state of all of them at once and tells you, in plain colors, whether each is on, off, or in an iffy state. It also lists every open network port and every scheduled task on your PC, so you can spot things that shouldn't be there.

The security overview

Item	What it checks
Activation	Is Windows properly activated? An unactivated copy is missing security updates.
Firewall	Is the built-in Windows Firewall running on all three network profiles (Domain, Private, Public)?
Defender	Is Windows Defender (or your installed antivirus) actively scanning?
UAC	Is User Account Control set to a safe level? UAC is what prompts you for permission when something tries to change the system.
Secure Boot	Does your PC verify that Windows hasn't been tampered with before it loads?
BitLocker	Are your drives encrypted? If your laptop is stolen, BitLocker means the thief can't read your files.

Green is good; yellow means "look closer"; red means fix it now.

Listening ports

Every program that accepts incoming network connections "listens" on a port. Most of the time that's fine — your browser needs to listen to get replies. But some ports are magnets for attackers:

• Port 21 (FTP) and 23 (Telnet) are ancient and unencrypted. They shouldn't be open on a home PC.
• Port 445 (SMB) is the Windows file-sharing port. It's fine inside a home network, but exposing it to the internet has caused some of the largest malware outbreaks in history.
• Port 3389 (RDP) is Remote Desktop. Great tool — terrible idea to expose to the open internet.

TuneBit flags these in orange so you can investigate.

Scheduled tasks

Scheduled Tasks are little automations Windows runs in the background on a schedule. Most are legitimate (Windows Update, driver installers, etc.). But malware loves to create scheduled tasks to keep itself running even after you reboot. The Scheduled Tasks panel shows every user-created task along with what it runs — scroll through and look for anything unfamiliar.

How to use it

1. Go to Protect → Security Audit. A scan runs automatically when the page opens.
2. Start with the top overview. Fix any red items before moving on.
3. Scan the ports list for red entries — those are the risky ones.
4. Browse the scheduled tasks and click the Export button if you want a text file to share with an expert.
5. Click Refresh after making changes to confirm they stuck.