Check 46 of 54 · Attack surface
Risky services open to the internet, read from a public index without touching your systems.
Engine 1.57.0, read 25 October 2026
What have you left open to the internet?
A public internet index, for the addresses your website is served from: open ports, and the vulnerabilities it lists against them. An address that belongs to a content network or firewall service in front of you is left out. It is recognised by the provider's published addresses or hostnames, or by the index's own record of it.
Remote access, databases and admin pages are the first things an attacker looks for.
A failure is a finding in your result. The check is scored, so it can lower your score, and the Full Report gives every finding its severity and a fix. If the check cannot finish, it is recorded as unknown: it carries no penalty, and it is never a pass.
Open ports are observed. The vulnerability list is the index's inference from version numbers, so it weighs far less and the finding says to confirm it. The scan cannot tell shared hosting from a server of your own. On shared hosting the listing is the provider's to fix, and the finding says so.
Check 46 is one of 5 in Attack surface. See it in its row on the scanner page, beside the rest of Attack surface.
The free check includes this one and takes about 30 seconds. No account. Nothing to install.