What it reads
Whether every address your website is served from sits behind a known scrubbing or content network. A site only partly behind one does not count as covered, and the finding names the addresses left exposed.
Check 49 of 54 · Attack surface
DDoS protection, explained.
Whether a shield sits in front of your site, or attackers can hit the server directly.
Engine 1.57.0, read 25 October 2026
Free checkAdviceReliability: Moderate
What have you left open to the internet?
What the check does, and where it stops.
Why it matters
A flood aimed at an unshielded server takes the site down with it.
What a finding looks like
What it finds is shown with a recommendation. It is advice, so it never lowers your score. If the check cannot finish, it is recorded as unknown: it carries no penalty, and it is never a pass.
Where its limits are
Spotting a known shield is reliable. One we do not recognise reads as none, and we do not test whether the server behind a shield can be reached directly.
ReliabilityModerate: confirm before acting
Check 49 is one of 5 in Attack surface. See it in its row on the scanner page, beside the rest of Attack surface.
See how your domain does.
The free check includes this one and takes about 30 seconds. No account. Nothing to install.