Skip to content

Features

Everything BirdGuard watches – and how it fixes it

Three main things and four bonuses, one goal: for you to know exactly what is happening on your computer and to stay in control of it. Everything is implemented and covered by 715 automated tests (audit of 7 Oct 2026). Still missing: hands-on verification on a clean system and a signed installer.

The app interface is currently in Czech only. The screens below are shown translated into English for illustration.

Security and privacy checks

BirdGuard examines your Windows 11 settings and builds a score and a list of findings sorted by severity. Each finding comes with a plain explanation and, where one exists, a safe fix.

  • System: updates, SmartScreen, UAC, BitLocker, Secure Boot
  • Network: firewall, Remote Desktop, SMBv1, encrypted DNS
  • Privacy: telemetry, advertising ID, location, microphone and camera
  • Accounts and data: passwords, PIN, Windows Hello, guest account

Real-time monitoring

As a Windows service it watches what changes on your computer and alerts you when something shows up that should not be there. For every event you see what happened and when.

  • New startup entry, service, driver or scheduled task
  • Hidden persistence via WMI and the ClickFix trick in the Run dialog
  • Connections to known malicious addresses and vulnerable drivers (LOLDrivers)
  • Ransomware: decoy files and mass file changes
  • Camera and microphone: which app is using them right now
  • New device on your home network and changes to Defender settings

Oversight of AI agents

AI agents that work directly on your computer launch programs, read and change files and connect to the network. BirdGuard records their sessions and shows you exactly what they did. A suspicious session can be stopped.

  • Programs started, files read and changed, network connections
  • Behaviour rules and alerts when an agent breaks them
  • Agent permissions: read, write or both in the working folder
  • Record-only by default; you switch on active guarding yourself

Fixes you can undo

Fixes come from a fixed catalogue; BirdGuard never runs arbitrary commands. You see a preview before a change, and afterwards there is an Undo button in History.

  • Preview of changes and your confirmation before every fix
  • Original values are stored so you can undo
  • The fix journal is protected against being overwritten afterwards

Data breach checks

Checks run only on your explicit action and send the minimum amount of data.

  • Password: never sent, only 5 characters of its hash
  • E-mail: with your own Have I Been Pwned key
  • File: verified on VirusTotal, only the hash leaves, never the file

Performance, storage and optimisation

BirdGuard does not make you guess. It shows what starts with the computer, who is loading the processor and memory and which folders take the most space. It deletes nothing on its own.

  • Live charts and a ranking of who loads the computer (hour, 24 h, 7 days)
  • What delays startup, battery and disk health
  • Largest folders and files with a “Show in Explorer” button
  • Recommendations come with a preview and a way to undo the change

Optional AI explanations

Don't understand a finding? The assistant explains it in plain language. The text sent is anonymised first, and in the app you can see the exact record of everything that left. Without AI BirdGuard works in full, just with pre-written texts.

  • Anonymisation of names, e-mails, IP addresses, passwords and keys
  • A “What was sent to AI” overview with the exact wording of queries
  • The API key is kept in Windows Credential Manager

What we check

An overview of the areas and settings BirdGuard watches. We keep extending the list.

System

  • Windows Update
  • SmartScreen
  • User Account Control (UAC)
  • BitLocker
  • Secure Boot
  • Memory integrity

Network

  • Firewall (all profiles)
  • File and printer sharing
  • Network discovery
  • Remote Desktop
  • SMB 1.0 protocol

Privacy

  • Diagnostic data and telemetry
  • Advertising ID
  • Location
  • Microphone and camera
  • Activity history
  • Windows suggestions and tips

Accounts

  • Passwords and PIN
  • Windows Hello
  • Guest account
  • Automatic sign-in
  • Unused administrator accounts

Honest about the limits

A security tool should be trustworthy, not perfect. Here is what you should know up front.

It is not an antivirus

BirdGuard has no scanning engine and Windows does not list it as an antivirus. A “no problems” report does not mean your computer is safe. Use it alongside Microsoft Defender.

It recognises most things only after the fact

It can truly prevent things for the network (blocking a program in the firewall), for the camera and microphone and for its own fixes. Other events are reported.

It changes the system during installation

It installs a service under the SYSTEM account with automatic start, turns on the “File System” audit (the Security log grows) and adds a notification-area icon. Uninstalling reverts everything.

Full monitoring requires administrator rights

Without administrator rights it runs in limited mode: short-lived processes and connections may be missed.

Try BirdGuard

Free, no account and no ads. It runs in the background and will not slow you down.

Notify me at launch