InfraGuard

Port 443 (HTTPS) — exposure risk

A standard public service — usually fine to expose, but keep it patched and on TLS.

StandardWeb

What it is

HTTP/HTTPS plus alternate web ports like 8080/8443/8000.

Why it is risky

Standard web is normal, but alternate ports often front unprotected admin consoles, debug endpoints, or proxies.

What to do

Redirect 80→443 with TLS; put management/alt ports behind auth and IP restrictions.

Is it listening on your server?

Linuxss -ltnp 'sport = :443'

Track these versions on your own servers

InfraGuard collects installed software versions from every server and flags the ones with known vulnerabilities. Self-hosted — nothing leaves your network.

Weekly exploited-vulnerability digest

The KEV additions that matter for self-hosted servers, once a week. No other mail.