Features
Everything BirdGuard watches – and how it fixes it
Three main things and four bonuses, one goal: for you to know exactly what is happening on your computer and to stay in control of it. Everything is implemented and covered by 715 automated tests (audit of 7 Oct 2026). Still missing: hands-on verification on a clean system and a signed installer.
The app interface is currently in Czech only. The screens below are shown translated into English for illustration.
Security and privacy checks
BirdGuard examines your Windows 11 settings and builds a score and a list of findings sorted by severity. Each finding comes with a plain explanation and, where one exists, a safe fix.
- System: updates, SmartScreen, UAC, BitLocker, Secure Boot
- Network: firewall, Remote Desktop, SMBv1, encrypted DNS
- Privacy: telemetry, advertising ID, location, microphone and camera
- Accounts and data: passwords, PIN, Windows Hello, guest account
Overview
Problems found: 3
Last check today · 45 results
Run checkMain sections
Security
Needs attention
System security
88
To review
Network
100
All good
Privacy
76
To review
Accounts and data
100
All good
Real-time monitoring
As a Windows service it watches what changes on your computer and alerts you when something shows up that should not be there. For every event you see what happened and when.
- New startup entry, service, driver or scheduled task
- Hidden persistence via WMI and the ClickFix trick in the Run dialog
- Connections to known malicious addresses and vulnerable drivers (LOLDrivers)
- Ransomware: decoy files and mass file changes
- Camera and microphone: which app is using them right now
- New device on your home network and changes to Defender settings
Events
What BirdGuard recorded: suspicious programs, new startup programs, services, drivers, sign-in changes, new devices on the network and connections to malicious servers.
- Low
Unsigned program launched from a temporary folder
Installers commonly do this; but if you did not install anything, have the file checked by an antivirus.
- Medium
PowerShell with an encoded command
Some programs do this legitimately, but it is also a popular malware trick.
- Low
Application accepts connections from the network
The program started listening on network ports.
Oversight of AI agents
AI agents that work directly on your computer launch programs, read and change files and connect to the network. BirdGuard records their sessions and shows you exactly what they did. A suspicious session can be stopped.
- Programs started, files read and changed, network connections
- Behaviour rules and alerts when an agent breaks them
- Agent permissions: read, write or both in the working folder
- Record-only by default; you switch on active guarding yourself
AI agents
Record only, no alerts · 6 known agents, 8 behaviour rules
BirdGuard watches AI coding agents: when they ran, which programs they launched and where they connected. You can stop a suspicious session.
Active guarding
Off = agent activity is only recorded. On = suspicious behaviour is reported as an event.
Running now
Claude Code
running since today at 8:37 PM · 177 records
Fixes you can undo
Fixes come from a fixed catalogue; BirdGuard never runs arbitrary commands. You see a preview before a change, and afterwards there is an Undo button in History.
- Preview of changes and your confirmation before every fix
- Original values are stored so you can undo
- The fix journal is protected against being overwritten afterwards
History
How the security score has evolved and what BirdGuard changed with your consent. Reversible fixes can be undone at any time.
Score history
Fixes applied
Turn off “App Updater” at startup
Changes were reverted to the state before the fix.
today at 5:53 PMRevertedTurn off “Game Launcher” at startup
Verified – changes in effect.
6 Oct 2026Fixed and verifiedAI recommendation
Verified – changes in effect.
3 Oct 2026Partial
Data breach checks
Checks run only on your explicit action and send the minimum amount of data.
- Password: never sent, only 5 characters of its hash
- E-mail: with your own Have I Been Pwned key
- File: verified on VirusTotal, only the hash leaves, never the file
Privacy
2 to review · 17 results
Needs attention
- Fix
Advertising ID is enabled
Apps can use it to tailor ads to your activity.
- Fix
Telemetry: optional diagnostic data
Windows sends more diagnostic data than necessary.
Information
Microphone access
18 apps have microphone access.
All good
Online speech recognition
Voice input is not sent to the cloud for processing.
Camera access
Camera access is turned off for all apps.
Performance, storage and optimisation
BirdGuard does not make you guess. It shows what starts with the computer, who is loading the processor and memory and which folders take the most space. It deletes nothing on its own.
- Live charts and a ranking of who loads the computer (hour, 24 h, 7 days)
- What delays startup, battery and disk health
- Largest folders and files with a “Show in Explorer” button
- Recommendations come with a preview and a way to undo the change
Performance
Live computer load over the last two minutes. The charts refresh only while this page is visible.
Processor
33 %
usage across all cores
Memory
45 %
14.3 GB of 31.9 GB
Disk
0 %
read 0 B/s · write 691 KB/s
Network
8.2 KB/s
receive 5.4 KB/s · send 2.8 KB/s
Optional AI explanations
Don't understand a finding? The assistant explains it in plain language. The text sent is anonymised first, and in the app you can see the exact record of everything that left. Without AI BirdGuard works in full, just with pre-written texts.
- Anonymisation of names, e-mails, IP addresses, passwords and keys
- A “What was sent to AI” overview with the exact wording of queries
- The API key is kept in Windows Credential Manager
Assistant
Ask anything about the security of this computer. The assistant (Claude) works only with anonymised data. It changes nothing on its own.
No name, computer name or paths made it into the query.
What we check
An overview of the areas and settings BirdGuard watches. We keep extending the list.
System
- Windows Update
- SmartScreen
- User Account Control (UAC)
- BitLocker
- Secure Boot
- Memory integrity
Network
- Firewall (all profiles)
- File and printer sharing
- Network discovery
- Remote Desktop
- SMB 1.0 protocol
Privacy
- Diagnostic data and telemetry
- Advertising ID
- Location
- Microphone and camera
- Activity history
- Windows suggestions and tips
Accounts
- Passwords and PIN
- Windows Hello
- Guest account
- Automatic sign-in
- Unused administrator accounts
Honest about the limits
A security tool should be trustworthy, not perfect. Here is what you should know up front.
It is not an antivirus
BirdGuard has no scanning engine and Windows does not list it as an antivirus. A “no problems” report does not mean your computer is safe. Use it alongside Microsoft Defender.
It recognises most things only after the fact
It can truly prevent things for the network (blocking a program in the firewall), for the camera and microphone and for its own fixes. Other events are reported.
It changes the system during installation
It installs a service under the SYSTEM account with automatic start, turns on the “File System” audit (the Security log grows) and adds a notification-area icon. Uninstalling reverts everything.
Full monitoring requires administrator rights
Without administrator rights it runs in limited mode: short-lived processes and connections may be missed.
Try BirdGuard
Free, no account and no ads. It runs in the background and will not slow you down.
Notify me at launch