SOC 2 Type II · ISO 27001 · 1,400 security teams
SOC 2 Type II · ISO 27001 · 1,400 security teams
Palisade
Palisade
Risk score82/100open
Next page/
Home
Network · 11 September 2026 · 4 min read
Why port 3389 is still open in 2026
Remote desktop on the public internet is the oldest finding in the book. It keeps coming back for one very human reason.
Written by Darius Okafor · Infrastructure lead
Somebody needed to get in from home, once, and the rule was never removed.
How it happens
A contractor asks for access. A firewall rule is added with a note to remove it. The note is the only thing that gets removed.
The fix that lasts
- Put management ports behind your identity provider
- Give temporary rules an expiry date
- Sweep for open ports every day, not every quarter
Find yours today
You do not need a scanner to start.
1. List every firewall rule that allows 0.0.0.0/0
2. Keep the ones on ports 80 and 443
3. Ask who owns each of the others
A temporary rule without an expiry date is a permanent rule.
Most teams find three. One of them is always older than the person looking.
End of post
Network · 11 September 2026 · 4 min read
Why port 3389 is still open in 2026
Remote desktop on the public internet is the oldest finding in the book. It keeps coming back for one very human reason.
Written by Darius Okafor · Infrastructure lead
Somebody needed to get in from home, once, and the rule was never removed.
How it happens
A contractor asks for access. A firewall rule is added with a note to remove it. The note is the only thing that gets removed.
The fix that lasts
- Put management ports behind your identity provider
- Give temporary rules an expiry date
- Sweep for open ports every day, not every quarter
Find yours today
You do not need a scanner to start.
1. List every firewall rule that allows 0.0.0.0/0
2. Keep the ones on ports 80 and 443
3. Ask who owns each of the others
A temporary rule without an expiry date is a permanent rule.
Most teams find three. One of them is always older than the person looking.
End of post
Network · 11 September 2026 · 4 min read
Why port 3389 is still open in 2026
Remote desktop on the public internet is the oldest finding in the book. It keeps coming back for one very human reason.
Written by Darius Okafor · Infrastructure lead
Somebody needed to get in from home, once, and the rule was never removed.
How it happens
A contractor asks for access. A firewall rule is added with a note to remove it. The note is the only thing that gets removed.
The fix that lasts
- Put management ports behind your identity provider
- Give temporary rules an expiry date
- Sweep for open ports every day, not every quarter
Find yours today
You do not need a scanner to start.
1. List every firewall rule that allows 0.0.0.0/0
2. Keep the ones on ports 80 and 443
3. Ask who owns each of the others
A temporary rule without an expiry date is a permanent rule.
Most teams find three. One of them is always older than the person looking.
End of post
Start here
Run the sweep on your domain.
Tell us where to look. We set up a read-only connection with you on a short call, and you see your own findings the same day.
We will sweep
- Identity providerNot connected
- Cloud accountsNot connected
- DevicesNot connected
- Code repositoriesNot connected
Start here
Run the sweep on your domain.
Tell us where to look. We set up a read-only connection with you on a short call, and you see your own findings the same day.
We will sweep
- Identity providerNot connected
- Cloud accountsNot connected
- DevicesNot connected
- Code repositoriesNot connected
Start here
Run the sweep on your domain.
Tell us where to look. We set up a read-only connection with you on a short call, and you see your own findings the same day.
We will sweep
- Identity providerNot connected
- Cloud accountsNot connected
- DevicesNot connected
- Code repositoriesNot connected