Keep an eye on what your home devices expose to the internet

The problem

Home networks have quietly filled up with devices: cameras, smart TVs, thermostats, baby monitors, routers with their own apps. Many of these devices run a small web server for setup or remote viewing, and it’s easy for that management interface to end up reachable from the public internet without the owner ever deciding that on purpose.

Unfamiliar devices can also join home WiFi more easily than people expect, especially if a password was shared once and never changed, or a guest network was never set up at all. Most people have no simple way to see which devices are currently on their network or what those devices are doing.

A related, quieter problem is that some devices “call home” to servers in unexpected countries as part of normal operation, and sometimes for reasons that have nothing to do with the feature you actually use. Without visibility into DNS queries, there’s no way to notice this one way or the other.

None of this means every home device is compromised or that something is actively wrong. It means most people are running networks they can’t currently see into, and that’s worth being able to check.

What you can do for free today

These tools run from outside your home and check what’s visible from the public internet, with no account needed.

• Check your public IP and whether you’re behind CGNAT — CGNAT means your ISP shares one address among many households, which changes how exposure and blacklisting work for you.
• Confirm your router’s DNS hasn’t been silently changed — a common attack on home routers swaps the DNS server without the owner noticing.
• Check which commonly-exposed ports are open on your own IP — use this on your own connection, with your own consent, to see what’s reachable from outside.

What AdminKit will add

AdminKit’s Protective DNS is in early access and development, not live yet. The plan is to let devices or your router send DNS queries through an AdminKit resolver that blocks known-malicious domains and gives you a per-device view of what each device is actually looking up, with the first 25 devices free once it ships. That’s a step up from the tools above: instead of a one-time outside check, you’d get ongoing visibility into what your own devices are doing, from your own network’s point of view.

Privacy note

DNS logs and device lists reveal real patterns about a household: routines, who’s home, and when. AdminKit only turns this kind of logging on with clear consent from the person managing the network, keeps logs for 30 days by default, encrypts them, and deletes them on request. AdminKit never sells this data or uses it for ad targeting, and it is not built to monitor family members — it protects devices, not people.