niranjan20061907/winhardener ? reverse-engineered prompt

Build me a Windows 11 hardening web app that checks a machine against CIS benchmark settings and shows a simple dashboard with a live compliance score. I want it to scan common password, lockout, local policy, and Windows service settings, then mark each item as pass, fail, or error.

It should let an admin log in and apply fixes or reset them, either one at a time or all at once, while guests can only view the audit results. Please include a clean UI with a login page, dashboard, and a log page for activity history. I also want an exportable PDF report that lists each control, what it should be, what it is now, and whether it passed.

Make it work fully offline for air gapped environments, use local Windows tools and registry access, and keep everything self contained so it runs on a locked down machine. If you need to look up any current Windows or Flask details, go ahead and check the docs online.