// network exposure audit
Find what your firewall leaves exposed
Paste iptables, ufw, or AWS security-group rules (or a port list). Get ranked findings for internet-exposed services and risky rules — with fixes and an exposure score. Runs in memory only; nothing is stored.
Engine: Claude
1/1 audits left today
Frequently asked questions
What can I paste?
iptables rules, ufw output, AWS/GCP security-group JSON, or a simple "port service source" list. The format is auto-detected.
What does it find?
Services exposed to the internet (0.0.0.0/0), dangerous ports reachable from anywhere (SSH, RDP, databases, Redis, Elasticsearch), overly-broad ANY rules, and missing default-deny/egress control — each with a fix.
Does it scan my network?
No. It only analyzes the rules you paste. It never connects to anything and never executes commands.
Is my input stored?
No. Analysis runs in memory for your session only.