Self-defending computing device

A method, comprising:

• executing, based on an expiration of a time interval and based on a health check configuration received from an update server, a health check of a computing device, wherein the computing device comprises a plurality of processors, secure non-transitory computer-readable media, and a communication interface and wherein the plurality of processors comprises a secure processor and one or more primary processors;
• identifying an indication of one or more anomalies, wherein the one or more anomalies are associated with a security flaw at the computing device;
• determining, based a response configuration stored in the secure non-transitory computer-readable media, one or more response measures corresponding to an identified anomaly;
• and
• generating, based on an identified response measures at the computing device, replacement passcode data including one or more characters that are inaccessible at an input of the computing device.

A system comprising:

• an update server communicatively coupled to a network, wherein the update server communicates a health check configuration to a plurality of computing devices;
• a computing device, comprising:
• a primary processor;
• a primary non-transitory memory device comprising secure memory and storing computer-readable instructions that, when executed by the primary processor, cause the computing device to execute one or more applications via one or more network interfaces;
• and
• a secure module comprising:
• a secure processor, different from the primary processor;
• and
• a secure and read-only non-transitory memory device pre-configured with second computer-readable instructions protected from software modifications, wherein the second computer-readable instructions, when executed by the secure processor, cause the computing device to:
• cause execution, based on an expiration of a time interval and based on a health check configuration received from the update server, a health check of the computing device;
• determine, based on an anomaly identified during the health check and based on a response configuration stored in the secure memory, a response measure;
• and
• replace, at the computing device, passcode data comprising one or more characters that are inaccessible at an input of the computing device.