Exposed to the internet — this is a deliberately open demo host. Every port below is reachable by anyone who scans its IP right now. No login, no MFA, no audit. It exists to show the attack surface Veil removes.
You reached it by just typing a name. So can any scanner, bot, or attacker on earth — no identity required. Every service running here answers the public internet directly. That reachability is the first move in almost every breach.
These are real, listening services on this exact machine. Anyone can connect to them; several need no credentials at all.
$ nmap -sV exposed.getveil.eu Starting Nmap … scanning 64.227.70.83 PORT STATE SERVICE VERSION 22/tcp open ssh OpenSSH 9.6p1 Ubuntu 80/tcp open http ACME Ops console 5432/tcp open postgresql PostgreSQL 16 6379/tcp open redis Redis 7.0.15 11434/tcp open http Ollama LLM API # 5 open ports. Full attack surface, indexed in seconds.
The data behind these ports is planted demo data — nothing real is at risk here. The exposure, though, is completely real.
Same app, same database, same model server, running on a second host. The only difference: Veil. A scanner sweeping the internet finds nothing to connect to.
open ports · reachable by anyone
reachable services · nothing to attack
The cloaked host still works perfectly — but only for a verified identity coming in over Veil's private overlay. From the public internet it simply doesn't answer. There's no port to find, no login to brute-force, no version to fingerprint.
Your services go dark on the public internet. Mass scanners index open ports within hours — you're simply not on the list.
Access is granted to a verified, MFA-checked identity — not to anyone who can route a packet to a port.
Who reached what, when, from where — logged. Blind public exposure becomes accountable, revocable access.
Same services, no open ports — reachable only by a verified identity.
Cloak the services you can't afford to leave exposed — SSH, databases, dashboards, model APIs. Reachable only by a verified identity. One command, under 20 minutes.