# How do I check what our company exposes to the internet?

Look at yourself from the outside, regularly. List your public IP addresses and domain names, including cloud servers and the office internet connection, then scan them from outside your network with a port scanner you trust, and ask your national CERT whether it offers a notification service for exposed systems. Compare the open ports with what you intended: anything you cannot explain, such as remote desktop, a database, a storage box or a router's admin page, should be closed or moved behind a VPN. Repeat after every firewall, router or cloud change, and check public certificate logs for subdomains you forgot. Scan only addresses you own or are authorised to test. NetSenX does not scan your public addresses. Inside the network it sees inbound connections to monitored hosts, on every plan, so a service that unexpectedly answers outside connections, or a host being scanned or hit by repeated logins, shows up in its traffic.

FAQ: [Remote work and exposed services](https://netsenx.com/en/faq/remote) · https://netsenx.com/en/faq/how-to-check-what-our-company-exposes-to-the-internet

## Read next

- https://netsenx.com/en/is-someone-inside-your-network
- https://netsenx.com/en/encrypted-traffic-analysis

## Related questions

- [Is automatic port opening (UPnP) on the office router a risk?](https://netsenx.com/en/faq/is-upnp-on-the-office-router-a-risk)
- [Who notices a remote login at 3 a.m. on a Sunday?](https://netsenx.com/en/faq/who-notices-a-remote-login-at-3-am-on-a-sunday)
- [Is remote desktop (RDP) exposed to the internet dangerous?](https://netsenx.com/en/faq/is-rdp-exposed-to-the-internet-dangerous)
- [How do we know if our VPN has been compromised?](https://netsenx.com/en/faq/how-do-i-know-if-our-vpn-is-compromised)
- [Can an infected home laptop spread malware into the office over the VPN?](https://netsenx.com/en/faq/can-an-infected-home-laptop-spread-malware-over-the-vpn)