(yes, its open source. link at the bottom, if u want to skip ahead!)
Most "debloat scripts" are a pile of registry edits you run as admin and pray. No preview, no undo, and half of them happily disable Safe Browsing or updates for "performance." For your browser, the most security-sensitive app you run, that's reckless.
So I built BraveDebloater with one rule: never make Brave less safe.
It clears out the noise like Rewards, Wallet, VPN nags, Leo AI prompts, News, and telemetry such as P3A, Web Discovery, and Chromium metrics. But it flat-out refuses to disable Shields, weaken Safe Browsing, turn off updates, or touch your hosts file. That isn't a README promise. It's enforced in the tool itself.
A few things that make it trustworthy:
Dry-run by default. Nothing changes until you explicitly apply.
Official Brave/Chromium enterprise policies, so every change is visible and auditable in brave://policy instead of hidden.
Automatic backups before any change, written safely so you never end up with a corrupted file.
Validated restore that checks the backup before writing anything and only touches Brave's own policy and profile files.
Doctor mode, a read-only health check of your current policy state with no writes.
It's MIT-licensed, PowerShell 5.1 compatible, and has a few beginner-friendly issues open. If you care about privacy or Windows tooling, I'd love a star and a PR.

Check it out at: https://github.com/osfv/BraveDebloater