Check what your shop's network exposes, without hiring IT staff

The problem

A typical shop or café runs cameras, a point-of-sale system, and guest WiFi for customers, often all on the same flat network with no separation between them. If a guest’s phone is compromised, or a device on the guest network is misbehaving, there’s often nothing stopping it from reaching the same network segment as your POS terminal or camera feeds.

Most shop owners don’t have IT staff watching this. Equipment usually gets installed once by whoever set it up, and then nobody looks at it again unless something visibly breaks. That makes it hard to notice if a camera’s management page or a booking system has become reachable from the public internet, or if the shop’s shared IP address has picked up a bad reputation from someone else’s abusive traffic.

None of this means a shop’s setup is unsafe by default. It means most shops are running networks nobody has specifically checked, and a few minutes with the right free tools can answer that.

What you can do for free today

• Check your public IP and whether it’s shared via CGNAT — useful context for understanding exposure and blacklisting.
• Check which commonly-exposed ports are open on your shop’s IP — run this on your own connection, with your own consent.
• Check your SSL certificate — relevant if you run a web-facing booking or ordering page for customers.
• Check if your IP is blacklisted — an IP shared with other shop traffic can get blacklisted if any device on it is abused.

What AdminKit will add

AdminKit’s Protective DNS is in early access and development, aimed at giving shops per-device visibility into what cameras, POS terminals, and other equipment are actually doing on the network, beyond a one-time outside check. For shops that want hands-on help rather than doing it themselves, AdminKit also offers expert services, including a remote security configuration review — this is quote-based, since no fixed price is published and every shop’s setup differs.

Privacy note

DNS logs and device lists from a shop network can reveal real patterns, such as when staff and customers are present and what devices are in use. AdminKit only enables this kind of logging with clear consent from whoever manages the shop’s network, keeps it for 30 days by default, encrypts it, and deletes it on request. AdminKit never sells this data or uses it for ad targeting, and it is not built to monitor staff or customers as people — it protects devices, not people.