Azure
Network Exposure
NSG rules allowing inbound from the internet — what's open, which ports and which targets.
Live preview — demo data
Same idea on another cloud
What this pane shows
NSG rules permitting ingress from the internet (Any or specific public CIDRs) to a subnet, NIC or service. Critical exposures (SSH, RDP, database ports) are surfaced first; expected exposures (HTTP/HTTPS) are grouped separately.
Key use cases
- Catch an NSG rule that opened RDP to the world.
- Confirm intentional public-facing rules are correctly scoped.
- Audit external attack surface during a security review.
- Find rules with the most-permissive sources for tightening.
How to embed
lp.js is the single-entry loader: it injects the shared LightPane runtime
(and sd-embed.css) once per page. Add this pane's own stylesheet and script;
the pane mounts itself wherever the matching <div> is in the DOM.
<!-- In <head> — this pane's stylesheet -->
<link rel="stylesheet" href="https://lightpane.io/_pane-tests/azure/network-exposure/network-exposure.css">
<!-- Your access key (inline, or set window.lpEmbed.accessKey from your own JS) -->
<script>window.lpEmbed = { accessKey: "<your-access-key>" };</script>
<!-- Where the pane should appear -->
<div class="lp-azure-network-exposure-panel" data-lp-account="<your-account-alias>"></div>
<!-- Before </body> — shared loader + this pane's script -->
<script src="https://lightpane.io/embed/lp.js"></script>
<script src="https://lightpane.io/_pane-tests/azure/network-exposure/network-exposure.js" defer></script>
Tier
Available on Explorer and above.
Build notes
No outstanding build notes.