Checks · PORT-002

PORT-002 · Admin panels exposed

Why it matters

Database admin tools and extra admin ports should not be reachable from the public internet.

How we detect it

After ownership is verified, a short list of admin ports and paths is probed with a plain connection.

How we fix it

Restrict those ports to a private network.

Can it be fixed automatically? Instructions only

Related checks

• DB-006 · No backups or point-in-time recovery
• DB-007 · Backups never restore-tested
• TLS-001 · Certificate expires in under 14 days
• TLS-002 · TLS below 1.2 accepted