Key figure: Reported cybercrime losses in the United States reached $16.6 billion in 2024, up 33% from 2023 (FBI IC3, 2024 Internet Crime Report).
Your homelab is a production network that happens to live in your house — and attackers treat it that way. This 10-question quiz grades your exposure across remote access, patching, segmentation, and backups. IoT security news is full of compromised home servers recruited into botnets; most owners never notice until the ISP calls.
Home labs combine the worst of both worlds: internet-facing services like a business, but the patching discipline of a hobby. Default credentials, unpatched services, and flat networks make them ideal botnet recruits and pivot points into home devices. Attackers scan the entire internet continuously, so an exposed service is typically found within hours of going online. The quiz checks the exact mistakes that show up in breach reports.
Your attack surface is the sum of every point where an attacker could try to enter your systems — open ports, login pages, exposed APIs, and unpatched services. Every service you expose to the internet adds to it.
10 honest questions about your self-hosted setup. Get a plain-English exposure rating and the three fixes that matter most. No signup, nothing installed, your answers never leave this page.
This quiz rates your habits. BreachHunter checks your real server for known exposures in 30 seconds. No signup.
Internet-facing services that only you use — admin panels, databases, SSH on port 22. Anything reachable from the open internet is scanned within hours, so keep private services behind a VPN or Tailscale.
Within days of a release for anything internet-facing. Unpatched applications are the most common entry point attackers find in automated scans.
Yes. Automated, tested restores are the difference between a bad weekend and a catastrophe — backups that have never been restored are not really backups.