Security
On this page
Windows security features should be evaluated by which attack or error they prevent. The mere fact of background operation does not make disabling them a useful gaming optimization.
Basic Windows protection
Section titled “Basic Windows protection”Real-time scanning of PowerShell scripts and programs by the security solution.
Built-in antivirus; when third-party software is installed, Windows changes the mode itself.
The service monitors protection status and displays the shield icon.
“Security and Maintenance” toasts and warnings when launching .exe files.
Filtering of inbound and outbound connections with no confirmed gaming benefit from fully disabling it.
Reputation check of downloaded applications and files before launch.
Hardening protection (VBS/UAC)
Section titled “Hardening protection (VBS/UAC)”Confirmed storage overhead and the boundaries of the recommendation for a home gaming PC.
Prompt to confirm administrative actions and the secure desktop.
Isolation of kernel security components by means of virtualization on Windows 10.
The hypervisor checks kernel code and does not let unsigned code through.
The set of VBS mechanisms in Windows 11: Memory Integrity, DeviceGuard, HVCI, Credential Guard.
On some systems these features can noticeably affect performance. The effect depends on the configuration: test a specific game under identical conditions and assess which protection you will lose by disabling them.
Microcode and CPU mitigations
Section titled “Microcode and CPU mitigations”Protection against attacks on speculative execution of the CPU (branch target injection).
Separation of kernel and process memory; mainly Intel processors.
Closes reading of data between processes through Intel CPU buffers.
For an ordinary system, mitigations should be kept enabled. Disabling is acceptable only for an isolated laboratory comparison with subsequent restoration.
Network, filters and DRM
Section titled “Network, filters and DRM”Video output protection for streaming, Blu-ray and protected content.
Multicast name queries without a DNS server; with DNS or IP addresses it can be disabled.
Detailed verification of the mechanisms: “BoosterX security settings: what changes in Windows 11 25H2”.