Security Controls
Citadel monitors your device to ensure it meets security and compliance requirements. Click any control below to learn more and get help fixing issues.
Clipboard scam protection (ClickFix)
Warns you when someone tricks you into copying and running a malicious command.
Browser is updated
Outdated browsers have security vulnerabilities that attackers can exploit
Disk is encrypted
Protects your data if your device is lost or stolen
System was restarted recently
Security updates often require a restart to take effect
System is up to date
Keeps your operating system protected against the latest threats
Screen locking is enabled
Prevents unauthorized access when you step away from your device
Firewall is enabled
Blocks unauthorized network connections and malicious traffic
Automatic updates are enabled
Ensures security patches are installed without manual intervention
Sharing services are disabled
Reduces attack surface by disabling unnecessary network services
SSH private keys are secured
Prevents unauthorized access to servers and code repositories
Boot options are secure
Prevents system tampering and ensures secure startup
No USB storage devices connected
USB devices can introduce malware or allow data exfiltration
Sensitive data is protected
Recovery codes and passwords should not be stored in plaintext
Exported files are purged
Old data exports can contain sensitive information
Unused files are purged
Old downloads can accumulate sensitive data over time
No forbidden applications installed
Certain applications pose security or compliance risks
All required applications installed
Essential security tools must be present to protect your device
No forbidden processes running
Certain running processes indicate security or policy violations
All required processes running
Critical security services must be active to protect your device
System Integrity Protection is enabled
Prevents unauthorized code from modifying critical system files
Gatekeeper is enabled
Prevents installation of unverified and potentially malicious software
Guest login is disabled
Guest accounts bypass security controls and audit trails
No insecure wireless networks
Weak WiFi encryption allows attackers to intercept your data
Windows Security Centre features are active
Core Windows security features must be enabled for protection
Antivirus protection is enabled
Detects and blocks malware, viruses, and other threats