Security tools for Windows from PC Armour. Audit your systems, discover every device on your network and expose hidden vulnerabilities with free, portable scanners. Then lock managed PCs down with PCArmour Guard, also free, and keep them that way.
From a quick PC health check to deep network CVE analysis and locking a PC down for good: every tool you need to understand, secure and control your environment.
Run a thorough security and health audit on any Windows machine in under 60 seconds. No account, no installation: just extract and run as Administrator. The Auditor analyses over 50 indicators and produces a scored Health Index report you can act on immediately.
Standalone .zip. Extract it and run as Administrator.
Illustrative sample. Results vary per machine.
| Compromised devices | |||
|---|---|---|---|
| High risk | 192.168.14.105 | Canon printer, JetDirect :9100 | CVE-2022-24671 |
| Medium risk | 192.168.14.1 | Router, default admin creds | Exposed |
| All live hosts | |||
| High risk | 192.168.14.22 | FTP, Telnet, SMB open (OFFICE-PC) | High |
| Low risk | 192.168.14.31 | QNap NAS (BACKUP-NAS) | Info |
| Low risk | 192.168.14.48 | Yealink T55W, VoIP :5060 | Protected |
| Medium risk | 192.168.14.60 | IP camera, no auth page | Review |
Scan results auto-expire after 48 hours. WAN IP checked against VirusTotal and AbuseIPDB.
Point it at any subnet and within seconds you'll have a full map of every live device, every open port and every dangerous misconfiguration on your network. Perfect for a rapid first-pass security check of homes, offices or client sites.
Windows, portable .zip. Run as Administrator.
Lock down Windows. Make it stick. Flip a toggle in the tray and a background service holds that setting in place through reboots, cumulative updates and Windows' own "self-healing". Built for IT professionals and businesses whose machines need to stay exactly as configured.
Windows 10, 11 and Server 2016+ (x64). Code-signed installer, no prerequisites.
Illustrative sample. Try the toggles.
Registry edits, batch files and one-off scripts don't hold. Windows re-enables update services, repairs its own scheduled tasks and reverts settings during cumulative and feature updates. A one-shot change can't win; continuous enforcement can. Guard's watchdog re-applies every setting you've chosen roughly every ten minutes and again the moment the machine wakes.
Run the signed installer as Administrator. The runtime is bundled, so it installs cleanly even on a bare Server 2016 box.
Register a free licence with just an email address and sign in by magic link. Each PC gets its own licence key.
Flip the toggles you need in the tray app. It's only the controls; the service, running as Local System, does the real work.
The watchdog re-asserts every setting on a timer and after every wake. Switch a feature off and Windows is cleanly restored.
At this time, PCArmour Guard is intended to remain free of charge. Register with just an email address, with no passwords to manage. One licence key per PC means a single machine can be revoked cleanly.
Each machine checks in weekly. If one can't check in for 28 days it safely stands down until it can, so a lapsed or blocked PC never runs unlicensed. Licence traffic is encrypted and tamper-checked on top of HTTPS.
Register a free licenceArriving in October 2026, the Advanced edition goes deeper than the standard scanner. It combines everything in the standard tool with an extensive CVE database of 8,900+ signatures, deep protocol analysis and comprehensive vulnerability assessment: the professional tool for thorough network security reviews.
Checks every discovered service against thousands of known CVEs, flagging vulnerable software versions, unpatched firmware and exploitable misconfigurations.
Service banners matched against 5,000+ vulnerability signatures including printer firmware, NAS exploits, VoIP flaws and more.
Advanced OS and device type detection using TCP stack analysis, HTTP headers, SNMP OIDs and service correlation.
In-depth analysis of SMB, SNMP, RDP, SIP, FTP and database services, checking for deprecated versions and dangerous configurations.
Every finding includes a specific remediation recommendation, risk severity and CVSS score where applicable.
Extracts and analyses stored WiFi profiles, flags weak PSK security and checks for rogue SSID risks.
Identifies and classifies routers, switches, firewalls, cameras, VoIP systems, NAS and IoT devices with confidence scoring.
Free. Windows, portable .zip. Run as Administrator.
| Feature | Standard | Advanced |
|---|---|---|
| LAN device discovery | Included | Included |
| Port scan and service ID | Included | Included |
| Default credential testing | Included | Included |
| Shareable web report | Included | Included |
| CVE vulnerability matching | Not included | Included |
| 5,000+ CVE signatures | Not included | Included |
| Advanced device fingerprinting | Not included | Included |
| Deep protocol analysis | Not included | Included |
| WiFi profile security audit | Not included | Included |
| CVSS score and detailed remediation | Not included | Included |
The complete managed service platform for IT professionals. Everything you need to monitor, secure and manage your clients' entire Windows fleet from a single web portal.
Full remote desktop access to client machines. Integrated tools for diagnosis, configuration and immediate remediation.
Continuous monitoring of CPU, RAM, disk health, event logs, uptime and performance trends across all endpoints.
Centrally scheduled full network audits with automated CVE checks, rogue device alerts and full reporting history.
Real-time process monitoring, unsigned binary detection and VirusTotal integration to catch active threats across your fleet.
Instant notifications when critical zero-day vulnerabilities are detected on managed endpoints, with guided remediation steps.
Tests and scores firewall, DNS and antivirus protection on all endpoints daily. Track your clients' security posture over time.
Policy-based app control to block unauthorised software, restrict USB storage and enforce security baselines remotely.
Centrally manage DNS settings across all devices. Push secure DNS resolvers and domain filtering policies from the portal.
Generate branded security reports for clients. Track remediation over time, demonstrate value and meet audit requirements.
Developed by ITProExpert, Ravtic LLC. Microsoft AI Cloud Partner and DigiCert code signing accredited.
PC Armour does not sell or share your data. The only personal information ever required is an email address, for PCArmour Guard and Pro MSP accounts.
All PC Armour software is digitally signed with a DigiCert-accredited code signing certificate through Ravtic LLC, verifying its authenticity.
All paid plans are processed by Stripe Inc. We never store any financial data. The audit tools need no account, and PCArmour Guard is free with a simple registration.
Developed by Ravtic LLC, a certified Microsoft AI Cloud Partner and Microsoft Development Partner, ensuring enterprise-grade quality.