Hardening items

3 recommendations. Filter by category, criticality, maturity tier, or system.

Critical (2)High (0)Medium (1)Low (0)

Eliminate Internet-Exposed RDP Before It Eliminates You

Directly exposed RDP is the top ransomware entry vector — find every instance, close it now, and move remote access behind VPN/ZTNA, a gateway, or Bastion.

FirstCriticalWindows Hardening Firewall & Network Security Zero Trust

Updated Jul 9, 2026Microsoft Windows Server · Microsoft Windows 10/11 · All firewall platforms · Microsoft Azure

Track

Layered Network Security in Azure with NSGs and Azure Firewall

Combine subnet-level NSGs with a centralized Azure Firewall in a hub-spoke topology for defense-in-depth network filtering.

ThenMediumFirewall & Network Security Cloud Security Zero Trust

Updated Jul 9, 2026Microsoft Azure

Track

Detect and Remediate Publicly Exposed Storage (Azure Blob / S3)

Find storage accounts and buckets with anonymous public access, lock them down, and enforce deny-by-default policies to prevent data leaks.

FirstCriticalCloud Security Vulnerability Management Compliance

Updated Jul 9, 2026Microsoft Azure · AWS S3 · Google Cloud

Track