In this report, we’ll examine the prevalence of unsafe network services leveraging data from RiskRecon, which conducts scans of internet-facing hosts and the services they’re running. The dataset includes millions of hosts across 40,000 commercial and public institutions—not home PCs and personal websites. Without tipping our hand, you might find it surprising what these organizations, which are responsible for protecting sensitive data, expose to the Internet for all to see. Perhaps even more importantly, we also look at whether these services forebode other, more inherently risky, security issues across the networks of the organizations in this analysis.