{"firewall":{"active":true,"default_incoming":"deny","default_outgoing":"allow","rules":[{"action":"ALLOW IN","comment":"SSH hardened","from":"Anywhere","port":"51820/tcp"},{"action":"DENY IN","comment":"block SMTP inbound","from":"Anywhere","port":"25/tcp"},{"action":"ALLOW IN","comment":"HTTP Nginx Gateway","from":"Anywhere","port":"80/tcp"},{"action":"ALLOW IN","comment":"HTTPS Nginx Gateway","from":"Anywhere","port":"443/tcp"},{"action":"(v6) ALLOW","comment":"SSH hardened","from":"IN","port":"51820/tcp"},{"action":"(v6) DENY","comment":"block SMTP inbound","from":"IN","port":"25/tcp"},{"action":"(v6) ALLOW","comment":"HTTP Nginx Gateway","from":"IN","port":"80/tcp"},{"action":"(v6) ALLOW","comment":"HTTPS Nginx Gateway","from":"IN","port":"443/tcp"}],"rules_count":8,"type":"ufw"},"grade":"A+","loopback_ports":[{"bind_address":"127.0.0.54","is_loopback":true,"port":53,"protocol":"udp","service":"systemd-resolved (DNS Stub)"},{"bind_address":"127.0.0.53","is_loopback":true,"port":53,"protocol":"udp","service":"systemd-resolved (DNS Stub)"},{"bind_address":"127.0.0.1","is_loopback":true,"port":39763,"protocol":"tcp","service":"local_daemon"},{"bind_address":"127.0.0.1","is_loopback":true,"port":5000,"protocol":"tcp","service":"latam-waitlist (Flask)"},{"bind_address":"127.0.0.1","is_loopback":true,"port":8888,"protocol":"tcp","service":"hermes-searxng (SearXNG)"},{"bind_address":"127.0.0.53","is_loopback":true,"port":53,"protocol":"tcp","service":"systemd-resolved (DNS Stub)"},{"bind_address":"127.0.0.1","is_loopback":true,"port":25,"protocol":"tcp","service":"postfix (Local SMTP)"},{"bind_address":"127.0.0.1","is_loopback":true,"port":34627,"protocol":"tcp","service":"local_daemon"},{"bind_address":"127.0.0.1","is_loopback":true,"port":8000,"protocol":"tcp","service":"marketplace-api (FastAPI)"},{"bind_address":"127.0.0.1","is_loopback":true,"port":8080,"protocol":"tcp","service":"agent-search-api (Uvicorn)"},{"bind_address":"127.0.0.54","is_loopback":true,"port":53,"protocol":"tcp","service":"systemd-resolved (DNS Stub)"},{"bind_address":"::1","is_loopback":true,"port":25,"protocol":"tcp","service":"postfix (Local SMTP)"}],"perimeter_security_score":100.0,"public_ports":[{"authorized":true,"bind_address":"0.0.0.0","port":80,"protocol":"tcp","role":"Public HTTP Edge Ingress Gateway (Nginx)","service":"nginx"},{"authorized":true,"bind_address":"0.0.0.0","port":443,"protocol":"tcp","role":"Public HTTPS Secure Edge Ingress Gateway (Nginx)","service":"nginx"},{"authorized":true,"bind_address":"0.0.0.0","port":51820,"protocol":"tcp","role":"Hardened Non-Standard SSH Socket","service":"sshd"},{"authorized":true,"bind_address":"::","port":80,"protocol":"tcp","role":"Public HTTP Edge Ingress Gateway (Nginx)","service":"nginx"},{"authorized":true,"bind_address":"::","port":443,"protocol":"tcp","role":"Public HTTPS Secure Edge Ingress Gateway (Nginx)","service":"nginx"},{"authorized":true,"bind_address":"::","port":51820,"protocol":"tcp","role":"Hardened Non-Standard SSH Socket","service":"sshd"}],"ssh_hardening":{"evaluated_port":51820,"max_auth_tries":3,"password_authentication":false,"permit_root_login":"without-password","pubkey_authentication":true,"score":100.0,"standard_port_22_disabled":true,"status":"HARDENED","x11_forwarding":false},"status":"OPTIMAL","summary":{"isolation_posture":"FULLY_ISOLATED","loopback_isolation_pct":66.7,"loopback_sockets_count":12,"public_sockets_count":6,"ssh_hardened":true,"ssh_password_auth":false,"ssh_port":51820,"total_listening_sockets":18,"ufw_active":true,"ufw_default_incoming":"deny","unauthorized_public_ports_count":0},"timestamp":"2026-10-27T23:19:53Z","unauthorized_exposures":[]}