10 honest questions about your self-hosted setup. Get a plain-English exposure rating and the three fixes that matter most. No signup, nothing installed, your answers never leave this page.

The 10 questions

1. Are all of your self-hosted apps updated to their latest versions?

Yes, I update within days of a release Mostly, but some lag behind Honestly, several are months old

2. Is SSH (port 22) directly reachable from the internet on your server?

Yes, open to the world Open, but with key-only auth No — VPN, Tailscale, or firewall-restricted

3. Do you use the default admin passwords on any service, router, or app?

Probably on at least one Not sure No, all changed and unique

4. Is your Nextcloud / media server / dashboard behind HTTPS with a valid certificate?

No, plain HTTP HTTPS but with warnings or self-signed Yes, valid certificate everywhere

5. Do you run the "built-in" all-in-one versions of apps (like Nextcloud's built-in Collabora CODE server)?

Yes No, or I keep them updated Yes, and I rarely update them

6. When did you last check your server logs for suspicious activity?

Never Months ago Within the last few weeks

7. Do you have automated, tested backups of your data?

No backups Backups exist but never tested Yes, automated and tested restores

8. Is two-factor authentication enabled on your admin accounts?

No On some, not all Yes, everywhere it is offered

9. Are any services exposed to the internet that only you use (admin panels, databases, dashboards)?

Yes, several Maybe one or two No, everything private is behind a VPN

10. Do you know which CVEs affect the software versions you are running?

No idea I hear about the big ones Yes, I track advisories for my stack

Get your full fix-it checklist by email

Optional. Opens your email app with your score pre-filled — send it and we will reply with the prioritized fix list for your rating. No list, no spam, one reply.

This quiz rates your habits. BreachHunter checks your real server for known exposures in 30 seconds. No signup.

How exposed is your homelab?

The 10 questions

Get your full fix-it checklist by email