BlueShield is a defensive system-administration and diagnostic tool. It reads crash and health data and invokes built-in Windows maintenance utilities (sfc, DISM, chkdsk, mdsched, verifier, Get-WinEvent, the optional Microsoft debugger). It does not contain, and will not accept, offensive code, exploits, or malware.

The "Risky Drivers" feature flags publicly-known vulnerable drivers that are already present on the host so the operator can remove or update them. This is a defensive hardening aid (cf. the LOLDrivers project). It does not load, exploit, or weaponize any driver.

BlueShield requires Administrator rights to read crash data and run repairs. It performs no network communication except, optionally, downloading public Microsoft debug symbols during crash-dump analysis (controlled by the symbol path).

If you discover a security issue in BlueShield itself (for example a path-handling or privilege flaw):

1. Do not open a public issue with exploit details.
2. Email the maintainers or open a private security advisory on the repository.
3. Include reproduction steps, affected version, and impact.

You can expect an acknowledgement within a few business days and a fix or mitigation plan thereafter.

The latest released minor version receives security fixes. Older versions are best-effort.