What the warning means
When Windows Security says your device is at risk, it is usually reporting that one or more core protections are disabled, outdated, blocked, or unable to communicate with the system.
The message can appear after a Windows update, a third-party antivirus install, a corrupted security service, or a real malware infection.
This warning matters because Windows Security is built around Microsoft Defender Antivirus, firewall protection, SmartScreen, and device health services.
If any of those layers stop working, Windows may flag the system as exposed even when the computer still seems normal.
Why Windows Security may show this alert
The fastest way to solve the problem is to understand the likely cause.
Common triggers include:
- Microsoft Defender Antivirus being turned off by another security app
- Outdated virus and threat protection definitions
- The Windows Security service or Security Center service not running
- Firewall settings being changed or reset
- Group Policy or registry changes made by software, malware, or an administrator
- Corrupted Windows system files after an update or crash
- A genuine malware infection that blocks security components
In many cases, the fix is simple.
In others, the alert is a symptom of deeper issues that require cleanup and repair.
Check whether another antivirus is installed
One of the most common reasons Windows Security reports a risk is that a third-party antivirus has taken over protection.
Windows typically disables parts of Microsoft Defender when another security suite is active to avoid conflicts.
Open Settings and review Apps or Installed apps for software such as Norton, McAfee, Bitdefender, Kaspersky, Avast, AVG, or ESET.
If you intended to use that product, make sure it is current and active.
If you do not want it, uninstall it and restart the PC so Windows can re-enable its own protection.
- Go to Settings > Apps > Installed apps
- Find the antivirus software
- Select Uninstall
- Restart the computer
Update Windows Security definitions
Outdated security intelligence can cause false alerts or leave Defender unable to detect current threats.
Keeping definitions updated ensures the latest malware signatures, heuristics, and cloud protection rules are active.
Open Windows Security, select Virus & threat protection, then choose Protection updates and click Check for updates.
You can also install all pending Windows updates from Settings > Windows Update.
If updates fail repeatedly, restart the device and try again.
A pending reboot often blocks security updates from applying correctly.
Restart the security services
If the Windows Security app shows a warning even though protection should be active, the Windows services behind it may be stopped.
The two most important services are Security Center and Windows Security Service, along with Microsoft Defender-related services.
To check them:
- Press Windows + R, type services.msc, and press Enter.
- Locate Security Center and ensure the startup type is not disabled.
- Start the service if it is stopped.
- Check Microsoft Defender Antivirus Service and related items as well.
If a service will not start, note the error message.
That can point to corruption, policy restrictions, or malware interference.
Run a Microsoft Defender offline scan
If the warning is caused by malware, a normal scan may not be enough.
Some threats hide while Windows is running and prevent security tools from working properly.
Microsoft Defender Offline scan restarts the device into a trusted environment and checks for persistent threats.
Use this path:
- Open Windows Security
- Select Virus & threat protection
- Choose Scan options
- Select Microsoft Defender Offline scan
- Click Scan now
After the scan, Windows restarts automatically.
Review the results and quarantine or remove anything detected.
Repair corrupted system files
Windows Security can misreport risk when system files are damaged.
This often happens after power loss, interrupted updates, disk issues, or malicious changes.
Repairing the Windows image and core files can restore the security interface and services.
Open Command Prompt as administrator and run the following commands one at a time:
sfc /scannow
DISM /Online /Cleanup-Image /RestoreHealth
First, sfc /scannow checks and repairs protected system files.
If it reports unrepaired corruption, DISM /Online /Cleanup-Image /RestoreHealth can repair the component store that SFC depends on.
Restart after both commands finish.
Review firewall and network protection settings
Sometimes the warning appears because firewall protection is off.
Windows Security monitors network protection closely, and a disabled firewall can trigger the device-at-risk message.
Go to Windows Security > Firewall & network protection and verify that the firewall is on for Domain, Private, and Public profiles.
If a profile is off, switch it back on unless you have a controlled business policy that requires otherwise.
If you are using a managed work device, group policy or endpoint management software may control firewall status.
In that case, contact the administrator instead of forcing changes locally.
Check for policy or registry changes
Advanced users and enterprise environments sometimes disable Defender features with Group Policy, Intune, or registry edits.
Malware also uses the same techniques to weaken security.
If the interface shows that settings are managed by your organization on a personal PC, that is worth investigating.
Possible signs include:
- Settings are grayed out
- Protection toggles switch back off automatically
- Windows Security says a setting is managed by your organization
- Services start and then stop again
If you recently used optimization tools, “debloat” scripts, or system tweakers, undo those changes.
Those tools often disable Defender, telemetry, or security notifications.
Reset the Windows Security app
If the app itself is damaged, the underlying protection may still work but the interface reports errors.
Resetting Windows Security can clear corrupted app data and restore normal behavior.
Open Settings > Apps > Installed apps, find Windows Security, select Advanced options, then choose Repair.
If the warning remains, try Reset.
A repair is less intrusive; a reset may clear local app state.
Afterward, reopen Windows Security and verify that virus protection, firewall, and account protection all show status correctly.
Use a second-opinion malware scanner
If you still see how to fix Windows Security says your device is at risk symptoms after the main checks, scan with a reputable second-opinion tool.
Malwarebytes, ESET Online Scanner, or similar utilities can detect threats that Defender misses or has trouble removing.
Use one scanner at a time and avoid installing multiple full antivirus suites.
Running too many real-time protection products can create conflicts and cause more warning messages.
When to consider a repair install
If nothing else works, a Windows repair install can fix persistent security issues without wiping your files.
This process reinstalls Windows system components while keeping apps and data in place, which is useful when the Security app, Defender services, or update infrastructure are badly damaged.
This is usually the right next step when:
- Services keep failing after every restart
- SFC and DISM do not fully resolve corruption
- Security settings are locked without explanation
- Windows Update and Windows Security both behave erratically
Use Microsoft’s official installation media or in-place upgrade process to reduce the risk of making the problem worse.
Prevent the warning from returning
After you fix the issue, a few habits can help prevent the alert from coming back.
Keep Windows Update active, avoid multiple antivirus programs, and do not use registry cleaners or system “optimizer” apps that alter Defender settings.
Also keep an eye on disk health, because failing storage can corrupt security files and services.
- Install monthly Windows updates promptly
- Keep only one real-time antivirus product installed
- Review security alerts instead of dismissing them
- Scan removable drives before opening files
- Back up important data regularly
If Windows Security says your device is at risk after a recent update or software change, start with installed antivirus apps, service status, and Defender definition updates.
If those do not solve it, move on to offline malware scanning and system repair checks.