How niranjan20061907/winhardener works
WinHardener is a local Flask application for auditing Windows 11 against CIS controls and applying operator-selected remediations. The principal workflow is sign-in, scan and score policies, review results, then optionally apply or reset controls; users can also inspect activity logs and export a PDF report. The graph preserves the documented password, lockout, local-policy, and service audit domains. The excerpts show routing and execution behavior only partially; documented reporting and storage capabilities are included where described, without inferring unshown call paths.
Main entry points: app.py Flask routes and access control · policies.py CIS control definitions · templates HTML pages · policy_executor.py Scan and compliance scoring
Components 18
Web interface
- HTML pages
templates - Dashboard interactions
static/dashboard.js - Dashboard styling
static/style.css - Activity log views
templates/logs.html
Application workflow
- Flask routes and access control
app.py - Role-based sign-in
app.py - Saved scans, values, and logs
app.py - PDF compliance report
app.py
CIS policy engine
- CIS control definitions
policies.py - Scan and compliance scoring
policy_executor.py - Password controls
policies.py - Account lockout controls
policies.py - Local policy controls
policies.py - Windows service controls
policies.py - Validate and apply or reset
policy_executor.py
Windows endpoint
- Windows policy interfaces
Other components
- Admin or guest
- Web browser
Connections 20
- Admin or guest → Web browser: uses
- Web browser → Flask routes and access control: requests pages
- Flask routes and access control → Role-based sign-in: handles sign-in
- Flask routes and access control → HTML pages: renders
- HTML pages → Dashboard interactions: loads
- HTML pages → Dashboard styling: loads
- Flask routes and access control → Scan and compliance scoring: runs audit
- Scan and compliance scoring → CIS control definitions: uses definitions
- CIS control definitions → Password controls: defines
- CIS control definitions → Account lockout controls: defines
- CIS control definitions → Local policy controls: defines
- CIS control definitions → Windows service controls: defines
- Scan and compliance scoring → Windows policy interfaces: reads settings
- Flask routes and access control → Validate and apply or reset: dispatches changes
- Validate and apply or reset → CIS control definitions: uses definitions
- Validate and apply or reset → Windows policy interfaces: writes settings
- Flask routes and access control → Saved scans, values, and logs: reads and writes
- Flask routes and access control → PDF compliance report: serves export
- PDF compliance report → Saved scans, values, and logs: reads saved scan
- Flask routes and access control → Activity log views: renders logs