iDefender (new HIPS for Windows)

I'm quite surprised that someone decided to develop a new behavior blocker/HIPS, and I haven't tried it yet. So I can't say anything about how effective and how trustworthy it is. It's best to first install it on a virtual machine of course.

https://idefender.net

 

A Github webpage is also available https://github.com/wecooperate/iDefender In "Issues" tab almost all posts are in Chinese language because iDefender is a Chinese product from Trustsing company.

 

OK, good to know. So it's a Chinese product, this will surely put many people off.

I remember in the past you also had a couple of Chinese HIPS like EQSecure and Malware Defender. System Safety Monitor was from Russia, and Process Guard from Australia, great tools. But the best HIPS ever was Neoava Guard, developed by only one guy from Iran.

https://freeware.fandom.com/wiki/Lists_of_freeware_behavior_blockers

 

BTW, they also make a tool similar to Process Monitor. So seems these guys do know their stuff, it's probably not snake oil.

https://github.com/wecooperate/iMonitor
https://learn.microsoft.com/en-us/sysinternals/downloads/procmon

 

iDefender could have some potential but currently it's pretty unknown software even if the first release is dated January 31, 2022. Certainly the main reason is that most of the releases was in Chinese language so it was aimed mainly to East Asia market. Anyway now support the English language too and lately, starting with version 5.03, released on 23rd July 2025, there have been frequent updates. Here is the releases list on GitHub https://github.com/wecooperate/iDefender/releases Also the changelog on the official website https://idefender.net/changelog.html

 

I think the official website could explain in a more detailed way all iDefender features, both for Free and Pro versions. I'm not a expert so I don't fully understand what they really do.
In my opinion poor informations may be more acceptable for a text editor or a image viewer, if necessary, less for a cybersecurity software.

 

I remember a Chinese security software WiseVector StopX, probably I even installed it. Its developer abandoned it after some time. Let's hope this isn't the case with iDefender.

 

It finally happened for HIPS EQSysSecure. After all these years a 64 bit EQSysSecure in the form of this iDefender WITH CUSTOM RULESETS/TEMPLATE rules.

Better late than never i guess.

 

Yes, I remember you were a big fan of EQSecure! And there was also another Chinese HIPS named ProSecurity, which wasn't bad either. But did you already play with iDefender, do you like it?

 

I actually think the website is not that bad. I do see they have a Pro version which protects against advanced code injection. But I have looked at all of the features, and it offers more than SpyShelter 15. It offers registry + exploit protection + protection against infostealers. If this stuff really works, is the question.

Yes I forgot to mention them, but to be honest, I never liked WiseVector. I didn't like the GUI and features.

 

Hello,
Shadowra, a well known cybersecurity software tester, 2 days ago tested iDefender Free version. I hope he will test the Pro version too.

https://odysee.com/@Shadowra:f/iDefender-Free-(Presentation-and-Reviews):e

 

Yes, I have no interest in the AV, so if it sucks it's not a problem. I'm only interested in the behavior blocker, it seems to be doing a good job. On the other hand, I'm not sure if ransomware was tested? Because iDefender claims it can also block ransomware.

 

I still regret System Safety Monitor

 

I'm not sure 100% but the iDefender official website shows that Ransomware Detection is included in Advanced Defense that I think is a Pro feature only, so Shadowra couldn't test Ransomware protection vs. iDefender Free. It could be very interesting if Shadowra could test the Pro version, as I wrote in my previous post. Also iDefender latest version has a free 30-days trial period for evaluating Pro version.

 

In my opinion it was almost at the level of System Safety Monitor. The best could be this: http://www.online-solutions.ru/en/products/osss-security-suite.html but it was discontinued. I used it and I like very much. It had a great granularity.

 

I wanted try it, but all the main security features are in the pay version.

 

Did EQSysSecure work at kernel level ? I remember that one of the hips cited in this thread worked at the user level but I can't remember which one.

 

As I wrote above if you wish to install latest iDefender version (5.1.1.0) it lets you evaluate the Pro version for 30 days. When the trial period ends it reverts to Free version, of course.
If you aren't interested neither to evaluate and/or, if necessary, subscribe for the Pro version, you are restricted to the Free version, obviously.

 

Not worth it to me for Pro Version (except some Nostalgia) because EqSysSecure allowed for a user to configure UNLIMITED INFINITE RULESETS FREE, which as a layered security which really tightened down a windows system.

WiseVector StopX implemented a form of Ai well ahead of all the recent Ai trends surfacing which was a spectacular achievement for a third party antimalware. I hit that program with everything in local tests, ransomwares, file infectors, etc and it was near bulletproof. A tough act to follow. Has anyone given THAT a thought?

Besides, by the time there is a release of Windows 12, Windows Devs will have tightened the screws with MD

 

I see that several months ago you created a dedicated thread on SpyShelter forum asking to implement protection against code injection and a few days ago you asked again for it. Unfortunately it seems that SpyShelter 15 developers are little inclined to introduce new substantial features. If I'm not wrong the only recent "relevant" addition was a hardware resource monitoring, not really needed for a cybersecurity software, moreover when already exist free softwares able to monitor hardware resources. They also removed Registry protection and, as far as I know, they didn't restore it. Mine isn't a criticism but it's a matter of fact.
On the contrary, by reading iDefender changelog, the developer is progressively adding new features so iDefender could be a cheaper alternative to SpyShelter but I don't know how reliable it is since it's a practically unknown software at the moment. As you wrote in your post the protection vs. code injection is a Pro feature and in the screenshot I attached in my previous post it's included in Advanced Defense section. Anyway for a better protection against it you should enable the "Kernel Enhanced Defense" but the developer warns that it isn't officially supported by the Windows (I guess he would mean Microsoft) and it could conflict with other softwares that use a similar technique, so probably it would lead to a BSOD.

 

Hello,
maybe something could change already with Windows 11 25H2 official release https://petri.com/windows-11-25h2-enhanced-security-without-kernel-access/ (By Russell Smith last updated Jul 04, 2025)

 

@Serphis I DID test the iDefender registry protection and was very impressed. If nothing else THAT FEATURE alone has eluded my own set up for years. So that was a relief to discover about it.

 

I'm glad you tested iDefender registry protection, thanks for it. The more information there is on iDefender, the better.
Also Shadowra agreed to test iDefender Pro version. Can't wait for it.

 

For additional info I post the link to a video dated 25th May 2023. iDefender was tested vs. Ransim and it fared very well. Let's wait for a updated test from Shadowra.

https://www.youtube.com/watch?v=s1GwkRNlwWI

 

I just noticed that at the end of iDefender official webpage there is a link to MajorGeeks https://www.majorgeeks.com/files/details/idefender.html The only person who posted a comment there didn't install it but he wasn't very happy anyway, LOL. I am not prejudiced against Chinese software, some years ago I purchased a lifetime license for a couple of them, not related to cybersecurity. They are still on my system and I'm fully satisfied because they work well so if a Chinese software works fine and maybe better than others similar ones, why don't use it ? My only fear is that, as has already happened with other Chinese cybersecurity softwares, its development may sooner or later be abandoned, although this can be true for any software, not just Chinese (i.e. Datpol, from Poland, abandoned SpyShelter 12 development and SpyShelter 15, developed by a USA company, isn't the same thing, as you know). I hope it's not the case with iDefender.