External surface report
your-store.com
Analyzed on September 3, 2026
Findings by severity
Summary for leadership
Your store's exposure is manageable but has two points worth closing soon: an admin panel reachable from anywhere on the internet and a database reachable from outside. Neither is cause for panic, but both are among the paths an automated attacker tries first. The rest are hygiene fixes that cut the information you give away and prevent the site going down over an expired certificate. Everything below is verified evidence, not an unfiltered alert list.
Asset: admin.tu-tienda.com.py
What it is
Your store's admin login is reachable from anywhere on the internet, with no IP restriction or visible second factor.
Why it matters
It's the door an attacker tries first: it enables brute-force attempts and, if breached, full control of your store and customer data.
What to do
Restrict access by IP or VPN and enable two-factor authentication for every admin account.
Asset: 190.x.x.x:5432
What it is
A database service (PostgreSQL) answers on a port open to the internet, when it should only live inside your network.
Why it matters
An exposed database is one of the most direct paths to a customer-data breach.
What to do
Close the port to the internet and keep the database reachable only from your servers, behind the firewall.
Asset: tu-tienda.com.py
What it is
The TLS certificate of your main site expires in 12 days.
Why it matters
If it expires, the browser shows a red warning that scares customers away and can halt sales until it's renewed.
What to do
Renew the certificate and automate renewals so it never depends on someone remembering.
Asset: tu-tienda.com.py
What it is
Your site is missing some standard protective headers (HSTS, Content-Security-Policy, X-Frame-Options).
Why it matters
Without them it's easier for an attacker to embed your site elsewhere to trick your customers or force insecure connections.
What to do
Add the recommended headers in your web server config. It's a quick, no-cost change.
Asset: www.tu-tienda.com.py
What it is
The web server publicly announces its exact name and version on every response.
Why it matters
It hands an attacker, for free, the information they need to look up known flaws for that version.
What to do
Hide the server version banner. It doesn't change behavior and cuts the information you give away.
Asset: dev.tu-tienda.com.py · old.tu-tienda.com.py
What it is
We found environments you may no longer use (dev, old) still published on the internet.
Why it matters
What nobody maintains ages badly: an old environment is often the weakest link in your surface.
What to do
Decommission what you don't use. Each thing turned off is one less door to guard.
Standards mapped in this report
What it would cost to watch this continuously
With 6 exposed assets, this store would fall in the NEO Business plan: an estimated US$212/mo to watch everything above around the clock and alert you when something changes.
This report is an example. Yours is real and free.
Enter your domain and NEO builds this same report for your company — nothing to install, usually in under an hour.