SecurityInsight settings · Settings > Risk Analysis reports

Internet-exposed network ranges

Key	SI_InternetExposedRanges
Where	Settings > Risk Analysis reports > Internet exposure
Type	List
Default	None: only what Defender, Exposure Graph, Azure and Shodan report counts as exposure.
Edition	Community

What it does

Address ranges that are reachable from the internet by design, such as a DMZ or an online landing zone. An asset with an address in them counts as internet exposed in the risk score.

When set

Assets with an address in these ranges get the Internet exposed risk factor, which adds its impact (default 4) to the asset side of their findings' risk score.

When blank or default

Left blank, the default applies: None: only what Defender, Exposure Graph, Azure and Shodan report counts as exposure.

Risk and how to reverse it

Changes what the Risk Analysis reports show, how findings are filtered or scored, or where reports go, from the next run; earlier reports are unchanged. Hiding findings can make real exposure invisible to readers. Reversible: change it back.

Requires

Nothing else.