What Is Secure System? Is It Safe to Disable at Startup?

What Is Secure System?

Secure System is a built-in Windows process used by Microsoft security features that rely on virtualization. It is commonly associated with Virtual Secure Mode (VSM), Credential Guard, Memory Integrity/Core isolation, and other virtualization-based security protections.

It is not a normal app you open from the Start menu, and it is not a regular startup entry like a Run key or Startup folder shortcut. Windows starts it when the related security features are enabled.

If you see Secure System in Task Manager, that usually means Windows is using hardware-assisted isolation to protect sensitive parts of the system from tampering.

Is It Safe?

Yes — if it is the real Microsoft process, Secure System is safe and expected on supported Windows systems.

Because malware can imitate Windows process names, verify what you are seeing before trusting it blindly:

• In Task Manager, right-click Secure System and look for options such as Properties or Open file location if available.
• Check that Windows identifies it as a Microsoft component.
• Be cautious if a similarly named process appears from an unusual folder, asks for startup permission, or is bundled with other suspicious software.

A real Secure System entry is part of Windows itself. It is not something you should download, reinstall, or “clean up.”

Should I Disable It at Startup?

No. Keep it enabled.

Secure System is tied to Windows security features, not a normal startup app. Disabling the protections behind it can reduce system security, especially protections for credentials and kernel memory.

In most cases, there is nothing to disable in Kudu's Startup Manager because this is not typically launched from the usual startup locations. If you are seeing a startup item with this exact name, double-check it carefully — that would be unusual and worth investigating.

Why Is It Using High CPU or Memory?

Secure System usually uses a small amount of memory and little or no CPU. Higher usage can happen when:

• Memory Integrity or other virtualization-based protections are active
• Windows is under heavy load from drivers, virtualization, or security checks
• Another process is triggering frequent protected operations
• A fake process is impersonating the Windows one

If usage seems unusually high for long periods, restart the PC and check whether it continues. Also review recent driver, virtualization, or security setting changes.

Do not try to end Secure System in Task Manager. Windows protects it for a reason, and forcing changes to the underlying security features can create stability or security problems.

How to Disable or Remove It

You generally should not remove or disable Secure System.

If you are troubleshooting and believe a Windows security feature is involved, check Windows Security settings for options related to Core isolation or other virtualization-based protections. Exact options can vary by Windows version and hardware, so make changes carefully and only if you understand the trade-off.

If the process looks suspicious because of its location, behavior, or publisher details, run a malware scan instead of trying to delete it manually.

Where Kudu Helps

Kudu can help you confirm whether this is a real startup item or a normal Windows security process:

• Performance Monitor shows whether Secure System is actually the process using CPU or memory
• Startup Manager helps confirm whether anything unusual is trying to start with a similar name
• Malware Scanner can check for suspicious persistence or impersonation
• Service Manager helps with related Windows services, while blocking critical changes where appropriate

If Secure System is present but there is no startup entry for it, that is usually normal.

Download Kudu Free →