A gentle check from the outside
Open ports
Once a day we check which network ports of your server are reachable from the internet.
Service versions
For every open port we identify which software and which version is answering.
Known vulnerabilities
We compare these versions with the Vulners database, which collects publicly known CVEs and is updated continuously.
What everyone should fix
These vulnerabilities are currently found most often on servers in our network. Check whether your server is affected and update the software to a fixed version.
Why you should allow this traffic
If you block our scanner in your firewall, we can no longer warn you when a vulnerability appears on your server. You would lose an early warning that works entirely in your favour.
The scan runs once a day, scans one server after another and is rate-limited. It will not slow your server down or cause downtime.
One email per server
You get one email
If we find at least one vulnerability on your server, you receive an email. The link in it shows all vulnerabilities we found on that server.
Scan again
Once you have fixed the vulnerabilities, click on scan again on that page. After the next scan run you will receive an email with the result, also if everything is fine.
Only new findings
We do not send reminders about vulnerabilities you already know about. You only hear from us again if a new vulnerability is found that you can fix with an update. Vulnerabilities for which your distribution has not released an update yet are listed, but do not trigger an email. If you click on ignore, we will not send you any further emails about this server.
Questions about a notice?
If you have questions about a finding or need help fixing it, our support team is happy to help.