Studio Matrx Monthly · Volume 1 · Issue 2 · July 2026
Amogh N P
 In loving memory of Amogh N P — Architect · Designer · Visionary 
Cyber-hygiene self-check

Cybersecurity Audit Tool

A hacked camera is a spy inside your home. Tick the hardening steps you have actually done across your cameras, NVR, router and network — each carries a weight and the total is a cyber-hygiene score out of 100 with a GREEN / AMBER / RED band and a plain-language fix for every gap still open. Planning figures; runs in your browser.

Tick every step you have actually done — each adds its weight to the score

Default passwords changed on every device & the router

Every camera, NVR/DVR and the router uses a unique strong password, not the out-of-box default.

+20

Firmware is up to date on cameras, NVR & router

The latest security firmware is installed across cameras, the recorder and the router.

+15

Security devices are on a separate network/VLAN from personal devices

Cameras and NVR sit on their own VLAN or guest network, isolated from phones and laptops.

+13

Remote access uses 2-factor authentication

Viewing cameras from outside the home requires a second factor, not just a password.

+15

UPnP and unused ports are disabled (no blind port-forwarding)

UPnP is off on the router and no camera port is silently forwarded to the internet.

+10

Guests use a separate Wi-Fi

Visitors join a guest SSID that is isolated from the main and security networks.

+7

Configs/footage are backed up

Device configuration and important footage are copied somewhere a single failure or wipe cannot destroy.

+10

Devices are from reputable vendors that still issue security updates

Cameras and NVR come from vendors that actively ship security patches, not abandoned no-name kit.

+10
0
Exposed
cyber-hygiene score / 100
Hardening needed — gaps to close (5)
  • Security devices are on a separate network/VLAN from personal devices+13

    Fix: Put security devices on a separate VLAN or network so a compromised camera cannot reach your personal devices.

  • Remote access uses 2-factor authentication+15

    Fix: Turn on 2-factor authentication for the app/cloud account, or reach cameras only over a VPN — never a bare open port.

  • UPnP and unused ports are disabled (no blind port-forwarding)+10

    Fix: Disable UPnP and remove blind port-forwards so devices cannot expose themselves to the internet without you knowing.

  • Configs/footage are backed up+10

    Fix: Back up device configs and key footage to a second location so a wipe, theft or ransomware does not erase everything.

  • Devices are from reputable vendors that still issue security updates+10

    Fix: Prefer vendors that still issue security updates; retire end-of-life devices that no longer receive patches.

An indicative defensive self-check, not a penetration test. A hacked security device becomes a spy inside your home — every open gap is a way in, so close them. This tool is an aid, not an authority; a professional does a real security assessment of your specific network and devices.