Personal & Business Security Report
5 critical 6 high 9 medium 10 low
“He will win who, prepared himself, waits to take the enemy unprepared.”: Sun Tzu
CONFIDENTIAL. This report describes weaknesses in your home or business. Store it securely and share it only with people you trust.
We looked at 203.0.113.48 from the outside, the way an attacker on the internet would see it.
| Port | Service | Exposure |
|---|---|---|
| 443/tcp | https | Reachable from the entire internet |
| 554/tcp | rtsp | Reachable from the entire internet |
| 3389/tcp | ms-wbt-server | Reachable from the entire internet |
| 8080/tcp | http-proxy | Reachable from the entire internet |
| # | Item | Status | Recommendation |
|---|---|---|---|
| 1 | Remote Desktop (RDP) is exposed Exposed RDP is a leading cause of small-business ransomware. | UNSECURE! Critical | Remove the port-forward; use a VPN to reach the computer. |
| 2 | A camera video stream (RTSP) is exposed Camera streams are often viewable without a strong password. | UNSECURE! High | Remove the port-forward and view cameras through the vendor app or a VPN. |
| 3 | A web admin page may be exposed on 8080 Router and device admin pages are often on 8080. | UNSECURE! Medium | Make sure remote administration is turned off on the router. |
| 4 | A web server answers on port 443 Something on your connection (often the router's admin page or a port-forward) is serving web pages to the internet. | UNSECURE! Low | If you don't host a website, turn off remote administration on your router. |
Passive check of https://mydigitalsecurity.pro/: HTTPS, certificate, security headers and email-spoofing protection.
| # | Item | Status | Recommendation |
|---|---|---|---|
| 5 | HTTPS is not enforced (no HSTS) Visitors can be downgraded to an unencrypted connection on hostile Wi-Fi. | UNSECURE! Medium | Add a Strict-Transport-Security header, e.g. max-age=31536000. |
| 6 | No CAA record A CAA record restricts which certificate authorities may issue certificates for your domain. | UNSECURE! Low | Add a CAA record naming your certificate provider (e.g. letsencrypt.org). |
| 7 | All nameservers at one provider If that DNS provider has an outage, your domain and email go down with it. | UNSECURE! Low | Consider secondary DNS at a second provider for resilience. |
| 8 | No Content-Security-Policy A CSP limits the damage if malicious script is ever injected into your pages. | UNSECURE! Low | Add a Content-Security-Policy header, starting in report-only mode. |
| 9 | Pages can be framed by other sites Without frame protection your site can be used in click-jacking tricks. | UNSECURE! Low | Add X-Frame-Options: SAMEORIGIN or a CSP frame-ancestors rule. |
| 10 | Software version revealed (x-powered-by) The x-powered-by header says 'PHP/8.3.28', which tells attackers what to target. | UNSECURE! Low | Hide version numbers in your web server configuration. |
| 11 | Missing X-Content-Type-Options Browsers may guess file types, which can be abused. | UNSECURE! Low | Add X-Content-Type-Options: nosniff. |
| 12 | No CDN or WAF detected in front of the site Your web server is exposed to the internet directly, with no filtering layer. | UNSECURE! Low | Consider putting the site behind a CDN/WAF (e.g. Cloudflare) to absorb attacks and hide the origin. |
7 of 15 checkpoints secure. Self-guided tour v1.0.0.
| # | Item | Status | Recommendation |
|---|---|---|---|
| Access points | |||
| 13 | Do all exterior doors have a keyed deadbolt? | SECURE! | Keep it up. |
| 14 | Have the locks been rekeyed since you moved in? | UNSECURE! Medium | Have a locksmith rekey every exterior lock; it costs far less than replacing them. Consult a pro |
| 15 | Is there a spare key under a mat, rock or planter, or with a neighbor? | UNSECURE! High | Use a combination lockbox or a smart lock with temporary codes instead. Do it yourself |
| 16 | Do sliding doors have a secondary lock or a dowel in the track? | SECURE! | Keep it up. |
| 17 | Are mail slots, pet doors and dryer vents too small or too secured to reach through? | NOT ANSWERED | Answer this in the tour to include it. |
| 18 | Is your mailbox lockable? | NOT ANSWERED | Answer this in the tour to include it. |
| 19 | Are backyard gates locked? | NOT ANSWERED | Answer this in the tour to include it. |
| 20 | Are ladders, tools, bikes and grills locked away? | NOT ANSWERED | Answer this in the tour to include it. |
| Windows & doors | |||
| 21 | Are exterior doors solid wood or metal (not hollow-core)? | SECURE! | Keep it up. |
| 22 | Do doors fit tightly in their frames with sound hinges? | NOT ANSWERED | Answer this in the tour to include it. |
| 23 | Can you see who is at the door without opening it? | UNSECURE! Low | Add a peephole or a video doorbell you already own or can connect to your network. Do it yourself |
| 24 | Do ground-floor windows have working locks or secondary locks? | NOT ANSWERED | Answer this in the tour to include it. |
| Alarms, cameras & lighting | |||
| 25 | Do you have an alarm system that is used every time you leave and at night? | UNSECURE! Medium | Arm it on a schedule or with your phone. If you have no system, ask us about monitoring the devices you already own. MDS remote admin |
| 26 | Are your cameras and doorbells using their own strong passwords and up-to-date firmware? | CHECK! Medium | Change camera passwords, enable two-factor login in the camera app and update firmware. MDS can check and manage these remotely. MDS remote admin |
| 27 | Are entryways and paths well lit at night (motion lights at key points)? | NOT ANSWERED | Answer this in the tour to include it. |
| 28 | Do indoor lights run on timers or smart schedules when you're away? | NOT ANSWERED | Answer this in the tour to include it. |
| 29 | Is your house number clearly visible from the street? | NOT ANSWERED | Answer this in the tour to include it. |
| Emergency readiness | |||
| 30 | Do you have working smoke detectors on every floor and in bedrooms? | SECURE! | Keep it up. |
| 31 | Do you have working carbon-monoxide detectors (if you have gas, a fireplace or an attached garage)? | UNSECURE! Critical | Install CO detectors near sleeping areas and on each level. Do it yourself |
| 32 | Is there an easy-to-reach fire extinguisher on each floor and in the kitchen? | SECURE! | Keep it up. |
| 33 | Does everyone know the emergency escape plan and meeting spot? | NOT ANSWERED | Answer this in the tour to include it. |
| 34 | Do you have first-aid supplies and at least 3 days of water and food? | NOT ANSWERED | Answer this in the tour to include it. |
| 35 | Are gas, water and electrical shut-offs labelled, with any needed tool next to them? | NOT ANSWERED | Answer this in the tour to include it. |
| 36 | Is the water heater strapped (in earthquake areas)? | NOT ANSWERED | Answer this in the tour to include it. |
| Valuables & documents | |||
| 37 | Are passports, deeds, spare cards and backup codes in a locked safe or safe-deposit box? | UNSECURE! High | Use a bolted-down fire/water-resistant safe or a bank safe-deposit box. Do it yourself |
| 38 | Do you shred documents with personal or financial information? | SECURE! | Keep it up. |
| 39 | Do you have a photo/video inventory of valuables stored in the cloud? | NOT ANSWERED | Answer this in the tour to include it. |
| 40 | If you hold cryptocurrency, is it in a hardware wallet with the recovery phrase stored offline? | NOT ANSWERED | Answer this in the tour to include it. |
| 41 | Are medications locked or out of sight? | NOT ANSWERED | Answer this in the tour to include it. |
| 42 | Is your mail held or forwarded while you travel? | NOT ANSWERED | Answer this in the tour to include it. |
| People & devices | |||
| 43 | Are old phones, laptops and drives wiped (or destroyed) before being sold, recycled or stored? | UNSECURE! High | Factory-reset with encryption on, or let MDS securely wipe them for you. MDS remote admin |
| 44 | Does every person have their own login on shared computers and tablets? | SECURE! | Keep it up. |
| 45 | Are children's devices set up with age-appropriate controls? | NOT ANSWERED | Answer this in the tour to include it. |
| 46 | Do you know your neighbors well enough to call them in an emergency? | NOT ANSWERED | Answer this in the tour to include it. |
4 of 9 checkpoints secure. Self-guided tour v1.0.0.
| # | Item | Status | Recommendation |
|---|---|---|---|
| Router admin | |||
| 47 | Have you changed the router's admin password from the one on the sticker? | UNSECURE! Critical | Set a long unique admin password (store it in your password manager) or enable app-only login with 2FA. MDS remote admin |
| 48 | Is the router's firmware up to date, with automatic updates on? | CHECK! Medium | Turn on automatic firmware updates. If the router no longer gets updates (usually 5+ years old), plan to replace it. MDS remote admin |
| 49 | Is remote administration (managing the router from the internet) turned off? | SECURE! | Keep it up. |
| 50 | Are UPnP and WPS turned off? | UNSECURE! Medium | Disable both. Our external scan will confirm nothing was left open. MDS remote admin |
| 51 | Are there any port-forwarding rules you don't recognise? | SECURE! | Keep it up. |
| Wi-Fi networks | |||
| 52 | Is your Wi-Fi using WPA3 or WPA2-AES (not WEP, WPA or 'open')? | SECURE! | Keep it up. |
| 53 | Do guests and smart-home gadgets use a separate guest network? | UNSECURE! Medium | Enable the guest network and move TVs, speakers, cameras and visitors onto it. MDS remote admin |
| 54 | Has the Wi-Fi password been changed since anyone who shouldn't have it (ex-employees, past tenants, contractors) last used it? | SECURE! | Keep it up. |
| 55 | Does the router use secure DNS with malware blocking (e.g. Cloudflare 1.1.1.2, Quad9 9.9.9.9)? | UNSECURE! Low | Set DNS to 1.1.1.2 / 1.0.0.2 (malware blocking) or 1.1.1.3 (adds adult-content filtering for families). MDS remote admin |
1 of 6 checkpoints secure. Self-guided tour v1.0.0.
| # | Item | Status | Recommendation |
|---|---|---|---|
| Email & sign-in | |||
| 56 | Does your main email account have two-step verification (preferably a passkey or authenticator app, not just SMS)? | UNSECURE! Critical | Turn on a passkey or authenticator app, and save the backup codes in your safe. MDS remote admin |
| 57 | Do you use a password manager (Apple Passwords, Google Password Manager, 1Password, Bitwarden)? | SECURE! | Keep it up. |
| 58 | Do you reuse any password on more than one site? | UNSECURE! High | Use the password manager's security check to replace reused passwords, starting with email and banking. Do it yourself |
| 59 | Have you run the Google Security Checkup or Apple Safety Check in the last 6 months? | NOT ANSWERED | Answer this in the tour to include it. |
| 60 | Do you use a separate email address for shopping and newsletters? | NOT ANSWERED | Answer this in the tour to include it. |
| Banking & identity | |||
| 61 | Is your credit frozen at Equifax, Experian and TransUnion? | UNSECURE! High | Freeze credit at all three bureaus (free); unfreeze temporarily when you apply. Do it yourself |
| 62 | Do your bank and card accounts send alerts for every transaction and new device login? | NOT ANSWERED | Answer this in the tour to include it. |
| 63 | Do you verify payment or wire-change requests with a phone call to a known number? | UNSECURE! Critical | Adopt a call-back rule for any new or changed payment details, to a number you already have on file. Do it yourself |
| 64 | Does your mobile carrier account have a port-out PIN / number lock? | CHECK! Medium | Enable Number Lock / port-out PIN in your carrier's app. Do it yourself |
Work from the top. Items marked MDS remote admin are included with professional monitoring and remote administration; we do them with your permission.
| Priority | What to do | Found in | Who | |
|---|---|---|---|---|
| ☐ | Critical | Main email has no strong second factor. Whoever controls it can reset every other password. Turn on a passkey or authenticator app, and save the backup codes in your safe. | Accounts, passwords & money tour | MDS remote admin |
| ☐ | Critical | Email-only payment changes are the #1 small-business fraud (business email compromise). Adopt a call-back rule for any new or changed payment details, to a number you already have on file. | Accounts, passwords & money tour | Do it yourself |
| ☐ | Critical | Remote Desktop (RDP) is exposed Remove the port-forward; use a VPN to reach the computer. | Exterior network screening | MDS remote admin |
| ☐ | Critical | Missing CO detection. Install CO detectors near sleeping areas and on each level. | Home & office walk-through | Do it yourself |
| ☐ | Critical | The router admin password is the factory default. Set a long unique admin password (store it in your password manager) or enable app-only login with 2FA. | Router & Wi-Fi tour | MDS remote admin |
| ☐ | High | Reused passwords let one breach unlock many accounts. Use the password manager's security check to replace reused passwords, starting with email and banking. | Accounts, passwords & money tour | Do it yourself |
| ☐ | High | Anyone with your details can open credit in your name. Freeze credit at all three bureaus (free); unfreeze temporarily when you apply. | Accounts, passwords & money tour | Do it yourself |
| ☐ | High | A camera video stream (RTSP) is exposed Remove the port-forward and view cameras through the vendor app or a VPN. | Exterior network screening | MDS remote admin |
| ☐ | High | Hidden spare keys are the first place burglars look. Use a combination lockbox or a smart lock with temporary codes instead. | Home & office walk-through | Do it yourself |
| ☐ | High | Identity documents are accessible to anyone in the home. Use a bolted-down fire/water-resistant safe or a bank safe-deposit box. | Home & office walk-through | Do it yourself |
| ☐ | High | Old devices still hold photos, passwords and documents. Factory-reset with encryption on, or let MDS securely wipe them for you. | Home & office walk-through | MDS remote admin |
| ☐ | Medium | Check: Does your mobile carrier account have a port-out PIN / number lock? Enable Number Lock / port-out PIN in your carrier's app. | Accounts, passwords & money tour | Do it yourself |
| ☐ | Medium | A web admin page may be exposed on 8080 Make sure remote administration is turned off on the router. | Exterior network screening | MDS remote admin |
| ☐ | Medium | Previous owners, tenants or contractors may still have keys. Have a locksmith rekey every exterior lock; it costs far less than replacing them. | Home & office walk-through | Consult a pro |
| ☐ | Medium | An alarm that isn't armed doesn't protect anything. Arm it on a schedule or with your phone. If you have no system, ask us about monitoring the devices you already own. | Home & office walk-through | MDS remote admin |
| ☐ | Medium | Check: Are your cameras and doorbells using their own strong passwords and up-to-date firmware? Change camera passwords, enable two-factor login in the camera app and update firmware. MDS can check and manage these remotely. | Home & office walk-through | MDS remote admin |
| ☐ | Medium | Check: Is the router's firmware up to date, with automatic updates on? Turn on automatic firmware updates. If the router no longer gets updates (usually 5+ years old), plan to replace it. | Router & Wi-Fi tour | MDS remote admin |
| ☐ | Medium | UPnP lets any device open holes in your firewall; WPS PINs can be brute-forced. Disable both. Our external scan will confirm nothing was left open. | Router & Wi-Fi tour | MDS remote admin |
| ☐ | Medium | Visitors and IoT devices share the network with your computers. Enable the guest network and move TVs, speakers, cameras and visitors onto it. | Router & Wi-Fi tour | MDS remote admin |
| ☐ | Medium | HTTPS is not enforced (no HSTS) Add a Strict-Transport-Security header, e.g. max-age=31536000. | Website screening | Consult a pro |
| ☐ | Low | A web server answers on port 443 If you don't host a website, turn off remote administration on your router. | Exterior network screening | MDS remote admin |
| ☐ | Low | Opening the door to check who's there is the most common way people are surprised. Add a peephole or a video doorbell you already own or can connect to your network. | Home & office walk-through | Do it yourself |
| ☐ | Low | DNS isn't filtering known malicious sites. Set DNS to 1.1.1.2 / 1.0.0.2 (malware blocking) or 1.1.1.3 (adds adult-content filtering for families). | Router & Wi-Fi tour | MDS remote admin |
| ☐ | Low | No Content-Security-Policy Add a Content-Security-Policy header, starting in report-only mode. | Website screening | Consult a pro |
| ☐ | Low | Pages can be framed by other sites Add X-Frame-Options: SAMEORIGIN or a CSP frame-ancestors rule. | Website screening | Consult a pro |
| ☐ | Low | Missing X-Content-Type-Options Add X-Content-Type-Options: nosniff. | Website screening | Consult a pro |
| ☐ | Low | Software version revealed (x-powered-by) Hide version numbers in your web server configuration. | Website screening | Consult a pro |
| ☐ | Low | All nameservers at one provider Consider secondary DNS at a second provider for resilience. | Website screening | Consult a pro |
| ☐ | Low | No CAA record Add a CAA record naming your certificate provider (e.g. letsencrypt.org). | Website screening | Consult a pro |
| ☐ | Low | No CDN or WAF detected in front of the site Consider putting the site behind a CDN/WAF (e.g. Cloudflare) to absorb attacks and hide the origin. | Website screening | Consult a pro |
Consent terms version 2026-11-08. The person requesting this report confirmed they own, or are authorized to test, the connection and website listed. Scores: scan sections start at 100 and lose points per issue (critical 30, high 18, medium 8, low 3). Tour sections score the weighted share of checkpoints that passed (critical 4, high 3, medium 2, low 1; “not sure” counts as half). The overall score is the average of the sections.
This report is a point-in-time screening, not a guarantee of security. The advice may not suit every situation. Questions: agents@mydigitalsecurity.pro · mydigitalsecurity.pro