Will It Vibe?RDP open to the whole internet
Part of Security, which counts for 30% of the overall score. When this check fires it deducts 15 points from that category, once per scan, no matter how many places it turns up.
What it detects
A security group ingress rule opens port 3389 to 0.0.0.0/0, exposing Windows Remote Desktop to internet-wide attack.
Why it matters
An ingress rule opening port 3389 to 0.0.0.0/0 exposes Windows Remote Desktop to the whole internet. RDP is a constant target of brute-force and exploit campaigns, and a world-open RDP port is a well-known path to ransomware. It should never be reachable from anywhere.
How to fix it
Restrict the RDP rule to a specific admin CIDR, a VPN range, or a bastion security group. Prefer Systems Manager Session Manager or an RD Gateway over a directly exposed port. If RDP must stay, keep the source list tight and enforce Network Level Authentication.
The paid report includes a ready-to-paste prompt for your AI coding agent for every check it finds, pointed at the exact findings from your scan. See pricing
Does your repo trip this check?
Paste a GitHub URL or drop a project folder. Scans run in your browser and take seconds.
Scan your repo