Why So Many Business Security Cameras End Up Exposed on the Open Internet

Every few months, another round of security research makes headlines: tens of thousands of business security cameras found sitting wide open on the public internet, their login screens reachable by anyone who knows where to look. It happened again this year. It will happen again next year. And in almost every case, the cause isn't a flaw in the camera itself — it's how the system was set up to allow remote viewing.

If you've ever asked an installer "can I watch this from my phone?" the answer usually involves one of two approaches. One of them quietly turns your security system into a target. The other doesn't.

How a camera ends up findable by strangers

To let you view a camera or recorder from outside your building, something has to let that connection in. The traditional way to do this is port forwarding: the installer opens a hole in your router's firewall and points it at the camera or recorder's own web interface, so your phone can reach it from anywhere.

That works. It also means the device's login page is now reachable from anywhere — not just from your phone. Automated scanners sweep the entire internet around the clock looking for exactly this kind of open door. Once a device is found, it gets probed for default passwords, outdated firmware, and known software bugs. None of that requires anyone to target your business specifically. It just requires your camera to be listed as "reachable" in a scan that runs on autopilot.

This is why the same kind of exposure keeps turning up in security research year after year, across countless brands and models. The common thread is never the brand of camera. It's an inbound port left open to the world.

The fix is to stop opening the door at all

There's a simpler architecture that avoids this problem entirely: instead of opening your network to let a connection in, the camera (or a small device on your network) reaches out to a cloud service over an encrypted connection — the same direction your laptop uses to reach any website. Nothing on your network has to accept an inbound connection, so there's no port to forward, no firewall rule to add, and no login page sitting exposed on the public internet for a scanner to find.

That's the model Silarius Cloud is built on. It's ONVIF-based, so it works with your existing IP cameras regardless of model. Cameras you already own connect out through a Silarius Gateway; newer Silarius X cameras skip the gateway and connect straight to the cloud. Either way, the connection is outbound and encrypted end to end, and you view your footage through the Silarius Cloud app or browser dashboard rather than through a port opened on your own router.

Recording quality is set per camera across three tiers — Mobile, Pro, and 4K — and retention runs from a few days up to a year on standard plans, with custom plans available up to three years for businesses that need to keep footage longer.

One important distinction: this is for IP cameras, not your NVR

Silarius Cloud connects IP cameras — it isn't a place to plug in a network video recorder. If your business already runs a recorder like a Silarius NVR for on-site storage, that's a separate system, and it's worth checking whether its own remote-access feature has ever been port forwarded onto the internet. If someone enabled "view from anywhere" on the recorder itself years ago, that's precisely the kind of open door described above — and it's one of the most common things an installer forgets to revisit.

If what you actually want is to check cameras from your phone without opening anything on your network, that's a job for an outbound, cloud-based connection rather than an inbound port on the recorder. Existing IP cameras can be added to Silarius Cloud through the Silarius Gateway without touching your firewall at all.

A short checklist, regardless of what you're running

Whether you're on an on-site recorder, a cloud service, or both, a few basics keep a system off the exposed list:

• Change every default username and password on every camera and recorder — this is still the single most common way devices get taken over.
• Turn off UPnP on your router, which lets devices open ports on their own without you noticing.
• Keep camera and recorder firmware current; many of the vulnerabilities scanners look for were patched months or years ago.
• Put cameras on their own network segment, separate from the computers that run your business.
• If you need remote viewing, prefer a service that connects outbound over an encrypted tunnel rather than forwarding a port to the device itself.

None of this requires replacing hardware you already own. It mostly requires knowing which door is open and closing it — or, for remote access, not opening one in the first place.

Browse Silarius ONVIF cameras and recorders, or see current plans and the full feature list on the Silarius Cloud page. For more on how footage is protected once it's stored, see what encryption actually protects, and if you're choosing on-site recording hardware, the NVR buying guide covers what to look for.