Skip to content

Public service exposure

Web services on non-standard ports

Whether a web-style port other than 80 and 443, such as 8080 or 8443, accepts a connection.

Part of the External Security Check. Free during the preview.

What it checks

Whether a web-style port other than 80 and 443, such as 8080 or 8443, accepts a connection.

A pass means: No web services were found on non-standard ports.

Possible findings

Web service on a non-standard port

Severity: InformationConfidence: Medium confidenceKind: Informational

What we found

A web-style port other than 80 or 443 accepted a connection.

Why it matters

Extra web services (admin panels, development servers, proxies) are easy to forget and often less well protected than the main site.

How to fix it

Check what is running on the port. Close it if it is not meant to be public, or make sure it is patched and protected.