Exposed Endpoint Scanner
Probes for debug panels and endpoints (Actuator, Telescope, Ignition, phpMyAdmin) exposed in production.
What it checks
This scanner probes for debug panels and endpoints reachable in production, such as Actuator, Telescope, Ignition or phpMyAdmin. It detects when those internal tools are accessible from the internet.
Why it matters
These panels often reveal highly valuable internal information such as configuration, environment variables or database access, meant only for development. Left open in production, they hand an attacker a direct door into your systems and data.
How to fix it
Disable these debug tools in production or restrict their access to internal networks or trusted addresses only. Check that your deployment configuration does not leave debug mode on or expose these panels publicly.
Check it on your site
Scan your site free and see if this and 44 other checks pass, with a fix prompt for every issue.
Scan my site free