Harden Runner by StepSecurity adds EDR to GitHub Actions runners

According to StepSecurity, Harden Runner now supports Windows and macOS GitHub-hosted runners, delivering EDR-level runtime security across Linux, Windows, and macOS CI/CD pipelines. The release is described as the first EDR solution to provide runtime security monitoring across all three major GitHub Actions platforms. The current offering operates in audit mode, with network and process event monitoring available, and specifies that process events are in Enterprise tier while network events are in Community tier.

The Community tier remains free for public repositories, including Windows and macOS support, and Harden Runner is already used by over 10,000 public repositories. Coming soon are block mode, file monitoring, support for self-hosted runners, and custom VM image support for GitHub-hosted Windows and macOS runners. The post notes there is zero new configuration required and encourages feedback after trying the cross-platform security features, dated 25 February 2026.