WinRansomProtect

WinRansomProtect is a lightweight Windows app that stops ransomware before it can encrypt your files. It watches file system activity and uses behavioral analysis to catch suspicious encryption, malicious PowerShell/CMD scripts, or anything trying to mess with your backups. When it catches something, it kills the process and quarantines it in under 200ms.

It runs on 32 core behavioral rules with three modes: Standard, Enhanced, or Custom. It's 100% offline—no cloud scanning, no telemetry, and it doesn't even need a network connection. Licenses activate offline and are tied to your machine.

It's built for home users and small teams who just want solid, no-bloat protection on Windows 10/11. Licenses are available for 1 or 3 devices (annual or lifetime).