Techniques for protecting applications from unsecure network exposure

A non-transitory computer readable medium having stored thereon instructions for causing a processing circuitry to execute a process for protecting an application from unsecure network exposure, the process comprising:

• identifying an at-risk application, wherein identifying the at-risk application further comprises determining that the application is configured incorrectly;
• identifying at least one port through which the at-risk application is accessible when the at-risk application is determined to be configured incorrectly;
• and
• determining, based on the identified at least one port through which the at-risk application is accessible, whether an exposure vulnerability exists, wherein the exposure vulnerability is an unapproved exposure of at least one of the at least one port to external resources.

A system for protecting an application from unsecure network exposure, comprising:

• a processing circuitry;
• and
• a memory, the memory containing instructions that, when executed by the processing circuitry, configure the system to:
• identify an at-risk application, wherein identifying the at-risk application further comprises determining that the application is configured incorrectly;
• identify at least one port through which the at-risk application is accessible when the at-risk application is determined to be configured incorrectly;
• and
• determine, based on the identified at least one port through which the at-risk application is accessible, whether an exposure vulnerability exists, wherein the exposure vulnerability is an unapproved exposure of at least one of the at least one port to external resources.