The Windows Security console also collects together various features that were previously scattered throughout the Settings app. These include Secure boot, which can defeat rootkits by preventing the BIOS from running startup code that doesn’t have the right cryptographic signature, and Windows Hello, which replaces your password with biometric authentication. Windows’ built-in parental controls are managed from here, too, as is the integrated firewall. With all this built right into the OS, you might wonder why you’d need to bother installing additional security software. Indeed, a 100% overall protection rating from AV-Comparatives and AV-Test provides pretty good reassurance that, if you simply leave Windows with its default protections enabled, you’re very unlikely to get infected.