Is BRUTAL Optimizer safe? The anti-cheat answer.
No kernel driver of our own. No DirectX hooks. Nothing injected into your game. No network filter driver. It runs in user mode using the tools Windows already ships — it never injects into or hooks the game, and never reads or writes its memory. Every change lands in Windows itself.
Why most "FPS boosters" are a ban risk
Anti-cheat doesn't care about your frame rate. It cares about who's poking the game.
Vanguard, Easy Anti-Cheat, BattlEye — they all ban on the same short list of behaviours: code injected into the game, DirectX or graphics-API hooks, a kernel driver fighting for ring 0, anything reading or writing the game's memory. Now look at a "booster" that draws your FPS by hooking the game's render loop. It's doing the exact thing an aimbot does to paint ESP on your screen. The anti-cheat can't read intent — it sees the hook, and it acts.
BRUTAL changes system settings without modifying the game.
How it stays separate from your game
No game injection or graphics hooks. Smart Route's standard network adapter is a separate, disclosed component.
No kernel driver of ours
Nothing of ours loads into ring 0. No signed driver of ours wrestling your anti-cheat for the same privilege level. The app itself stays in user mode.
No DirectX / graphics hooks
No hooks on Direct3D, DXGI, OpenGL or Vulkan. The render pipeline your game uses stays untouched.
No injection
No DLL injection. No code written into the game's process. No memory reads or writes. The game's address space is none of our business.
No network driver of ours
No WFP filter driver, no traffic interception. The network lab uses plain ICMP and TCP — same as ping and tracert. Smart Route's tunnel runs on the official WireGuard for Windows adapter, which Smart Route installs in one click, from WireGuard's own site, the first time you route a game.
How the FPS overlay reads frames without touching your game
This is the part people worry about, so here's exactly how it works.
The overlay is its own WPF window. On Windows 11, the FPS number is the game's own frame rate: BRUTAL counts the frames the game hands to Windows, from Windows' own graphics events (the graphics kernel's Microsoft-Windows-DxgKrnl Present events, read through Event Tracing for Windows), with no injection and no hooks. On Windows 10, and for emulators it doesn't measure yet, it shows the display's rate instead, read from Windows' display statistics through the documented D3DKMT graphics API and labelled DISPLAY on the overlay, or DISPLAY CAP when it sits at your refresh rate; while the game is minimised or covered it shows a dash and says why. Of the emulators, GameLoop is measured; BlueStacks, LDPlayer, MuMu, Nox and MEmu show the display rate for now. Next to it sit live CPU, GPU, RAM and a network HUD. It doesn't read the game's swap chain. It doesn't hook present. It doesn't inject into the game. It's a window on your desktop reporting numbers Windows already hands it.
That's a deliberate trade. A hooking overlay reads a per-game frame counter by injecting into the game, which is exactly what gets accounts banned. Ours counts only what Windows already reports, and only shows a number while a game is actually running: the game's own frame rate on Windows 11, and the display's rate, labelled DISPLAY, on Windows 10 and for emulators it doesn't measure yet. Nothing of ours ever enters the game. For a HUD you glance at mid-match, that's the right call. See it in the full feature list or the gaming optimizer page.
The new security features are safe the same way
Security Center, the Integrity Audit and DNS ad-blocking follow the exact rules above — no driver, no injection, nothing that touches your game.
We added a real Security Center and a persistence audit. The instinct is to worry that "security software" means a kernel driver and a memory scanner — the very things anti-cheat hates. It doesn't here. The Security Center is a thin wrapper over the Microsoft Defender already in Windows, and the Integrity Audit reads files-at-rest and WMI metadata only. Neither one opens, scans or writes the memory of any running process, so there's nothing for Vanguard, EAC or BattlEye to see.
Security Center wraps Defender
It drives the Microsoft Defender you already trust — no second antivirus engine, no signatures of its own. It never registers as an AV (that would silently disable Defender), has no "disable Defender" button, and shows real status, never a fake threat count. See the Security Center →
Integrity Audit reads metadata only
A persistence audit of the places malware hides — WMI persistence, IFEO hijacks, rogue tasks, hosts/proxy redirects. Files-at-rest + WMI only: no engine, no driver, no injection, no live memory scan, and it never OpenProcess into a game.
Ad-block is filtering DNS, not a hosts hack
System-wide ad, tracker and malware blocking by pointing your adapter at a filtering DNS resolver. No giant hosts blocklist to choke Windows, nothing for antivirus to lock — turning it off restores the captured DNS configuration, with an automatic-DNS fallback if the protected backup is invalid.
Same binaries Microsoft ships
Where it acts on your system, it uses tools already on your PC and already trusted.
The actual toolchain
No exotic drivers doing the heavy lifting. Just the documented, in-box Windows surface:
What we refuse to ship
Staying out of your game is half the story. The other half is not wrecking your system in the name of "cleaning" it.
Common worries, answered straight
Will it run next to Vanguard, EAC or BattlEye?
It runs alongside them like other Windows utilities: no injection, no hooks, no kernel driver of our own, and it never reads or writes the game's memory. Guardian and Extreme Mode raise an Android emulator's priority from outside its process, as Task Manager can, and never change a PC game's own process. Process Rules you create yourself are applied as you set them, except to games BRUTAL recognises that use, or may use, an anti-cheat, and to any game it recognises while an anti-cheat service is running. Each publisher decides what its anti-cheat allows.
Can this get my account banned?
Bans come from hooks, injection, kernel drivers and memory tampering inside the game. BRUTAL Optimizer does none of those. It changes Windows, not your game. No third-party tool can promise a game's policy will never shift; what we can promise is that the risky techniques are off the table.
Why does it need Administrator?
Registry tweaks, service changes, power plans and driver installs need elevation. That's a Windows rule, not a BRUTAL one. It asks for admin to do real system work, and supported persistent changes include protected undo.
What if I don't like a change?
Hit undo on that module — it writes back the exact values it found. Before a big run a restore point is attempted too, though System Restore is switched off on a lot of Windows installs; when Windows won’t make one the app says so on the spot, and per-module undo is the rollback. The process/service trim and the cache clean have nothing to undo, and the app says so before they run.
Are the Security Center and Integrity Audit safe with anti-cheat too?
They follow the same rules. The Security Center just drives the Microsoft Defender already in Windows — no second engine, no driver, no signatures of its own. The Integrity Audit reads files-at-rest and WMI metadata only: no driver, no injection, no live memory scan, and it never opens a running game's process. It allow-lists BattlEye, EAC, Riot and emulator components before showing anything, so it won't flag your games. See the Security Center.
Does the ad-blocker edit my hosts file?
No. The ad, tracker and malware blocking is filtering DNS — it points your active adapter at a filtering resolver. There's no giant hosts blocklist to choke Windows DNS and nothing for antivirus to lock. We snapshot your real DNS first, never disable the Windows DNS Client service (only flush it), and turning it off restores the captured DNS configuration, with an automatic-DNS fallback if the protected backup is invalid.
Is the free version this safe too?
Same engineering, top to bottom. The overlay, disk tools, drive health, network lab and 17 of the 22 modules are free, and they follow the same no-driver-of-ours, no-hook rules, with per-module undo on every registry change. More in the FAQ.
Everything in Pro, plus Smart Route
The same measure-first honesty, now for your connection: a WireGuard split-tunnel relay that measures your real path and only reroutes when it genuinely beats your ISP, and stays direct when it can't help. Nothing of ours runs inside the game: no injection, no hooks, no kernel driver of ours — the only kernel component is WireGuard's own signed network adapter. But relayed traffic is something a publisher can see, and their rules are theirs to set, so every title is manual today: you choose when a relay engages, and automatic engaging will only ever be offered for titles verified to use server-side anti-cheat. Ultra is $9.99 (charged as ₹899)/year and renews yearly until you cancel; measuring your route stays free for everyone.
Built so you never have to wonder
No driver of ours. No hook. No injection. Per-module undo on every registry change, with a restore point attempted before the big stuff. Download it, read what it changes, undo any registry change you don't like.