--- title: We Audited 50 Small Business Networks This Year. 90% Had This One “Convenience” Setting Enabled. description: Discover why UPnP is a security nightmare and how The Service Desk can help secure your business today. image: https://www.theservicedesk.net/hubfs/Portrait%20young%20shocked%20business%20woman%20sitting%20in%20front%20of%20laptop%20computer%20looking%20at%20screen%20isolated%20grey%20wall%20background.%20Funny%20face%20expression%20emotion%20feelings%20problem%20perception%20reaction.jpeg --- [Skip to content](https://www.theservicedesk.net/cybersecurity-for-large-and-small-businesses/we-audited-50-small-business-networks-this-year.-90-had-this-one-convenience-setting-enabled#main-content) [![The Service Desk Logo FINAL (1)](https://www.theservicedesk.net/hubfs/The%20Service%20Desk%20Logo%20FINAL%20(1).png)](https://www.theservicedesk.net) - [MANAGED IT](https://www.theservicedesk.net/sign-up) - [SERVICES](https://www.theservicedesk.net/services) - [OUR TEAM](https://www.theservicedesk.net/our-team) - [BLOG](https://www.theservicedesk.net/cybersecurity-for-large-and-small-businesses) # We Audited 50 Small Business Networks This Year. 90% Had This One “Convenience” Setting Enabled. [Robert Leal](https://www.theservicedesk.net/cybersecurity-for-large-and-small-businesses/author/robert-leal) Jan 2, 2026 11:59:34 AM ![](https://www.theservicedesk.net/hubfs/Portrait%20young%20shocked%20business%20woman%20sitting%20in%20front%20of%20laptop%20computer%20looking%20at%20screen%20isolated%20grey%20wall%20background.%20Funny%20face%20expression%20emotion%20feelings%20problem%20perception%20reaction.jpeg) Over the past twelve months, our team conducted deep-dive security audits for 50 small-to-medium businesses (SMBs). We looked at everything from firewall configurations to password hygiene. The results were eye-opening, but one statistic stood out above the rest: **45 out of 50 businesses (90%) had a specific "convenience" feature enabled that essentially acts as a welcome mat for hackers.** That feature? **Universal Plug and Play (UPnP).** ## What is UPnP, and Why is it Everywhere? UPnP is a networking protocol designed to make life easier. In a perfect world, it allows devices on your network—like printers, game consoles, and VoIP phones—to discover each other and automatically open "holes" in your firewall to communicate with the internet. - **The Convenience:** You plug in a new video conferencing system, and it "just works" without you having to manually configure port forwarding on your router. - **The Reality:** By allowing devices to automatically bypass your firewall, you are letting the software inside your network rewrite your security rules without your permission. ## Why Hackers Love It When our auditors see UPnP enabled, they know they’ve found a path of least resistance. Here is why it’s a security nightmare: 1. **Zero Verification:** UPnP doesn't ask for a password. If a device (or a piece of malware) on your network asks the router to open a port, the router simply says, "Okay." 2. **Punching Holes in the Perimeter:** Hackers can use UPnP to map your internal network or turn your office printer into a gateway to your file server. 3. **Shadow IT:** Your employees might plug in a "smart" coffee maker or an unvetted security camera. With UPnP, that $20 gadget can instantly expose your entire business network to the public web. ## The Audit Breakdown: What Else We Found While UPnP was the most common offender, it often traveled in a pack with these other "convenience" risks: ![Small Business Network Vulnerabilities Bar Graph](https://www.theservicedesk.net/hs-fs/hubfs/Small%20Business%20Network%20Vulnerabilities%20Bar%20Graph.png?width=1000&height=600&name=Small%20Business%20Network%20Vulnerabilities%20Bar%20Graph.png) ## How to Fix It Today If you’re running a business, "plug and play" should usually be "plug and pray." Security and convenience are often at opposite ends of the spectrum. 1. **Disable UPnP:** Log into your router’s administrative console and toggle UPnP to **OFF**. 2. **Disable WPS:** That little button on the back of your router is a major vulnerability. Disable it in your settings. 3. **Audit Your "Smart" Devices:** If a device doesn't need to be online to do its job, take it off the Wi-Fi. --- ## Don't Leave Your Security to Chance: Partner with The Service Desk Closing one "hole" is a great start, but true security is a moving target. Most small business owners don't have the time to sit in a router's console checking for vulnerabilities—but we do. At **The Service Desk**, we are more than just an IT MSP; we are your dedicated security guardians. We don't just "fix PCs"—we build ironclad environments that let you focus on growth, not data breaches. When you partner with us, you get: - **Proactive Network Audits:** We find the "convenience" settings hackers love before they do. - **24/7 Monitoring:** Our team watches your perimeter so you can sleep at night. - **Tailored Managed Services:** IT support that scales with your business, without the overhead of a full-time internal team. **Is your network part of the 90%?** It takes five minutes to check, but it could save you months of recovery. Don't wait for a breach to realize your "convenient" setup was a liability. Share This Article To: ## Related Posts ### [Jan 19, 2026 5:42:13 PM AI for Small Business: Your Secret Weapon (and How to Use it Safely)](https://www.theservicedesk.net/cybersecurity-for-large-and-small-businesses/ai-for-small-business-your-secret-weapon-and-how-to-use-it-safely) ### [Jan 7, 2026 4:06:55 PM Why "Wait and See" is a Failing Strategy: The Power of Proactive IT](https://www.theservicedesk.net/cybersecurity-for-large-and-small-businesses/why-wait-and-see-is-a-failing-strategy-the-power-of-proactive-it) ### [Dec 30, 2025 11:33:58 AM Don't Hire an IT Technician, Hire a Whole Team for Half the Price](https://www.theservicedesk.net/cybersecurity-for-large-and-small-businesses/dont-hire-an-it-technician-hire-a-whole-team-for-half-the-price) ![The Service Desk Logo Dark FINAL](https://www.theservicedesk.net/hubfs/The%20Service%20Desk%20Logo%20Dark%20FINAL.png) The Service Desk is a Managed I.T. Service provider in Texas and California. We specialize in supporting the technology needs of small to medium sized businesses. [mailto:robert@theservicedesk.net](mailto:robert@theservicedesk.net) - About Us - [Our Team](https://www.theservicedesk.net/our-team) - [Services](https://www.theservicedesk.net/sign-up) - [Terms of Service](https://www.theservicedesk.net/privacy-policy) - Resources - [Blog](https://www.theservicedesk.net/cybersecurity-for-large-and-small-businesses) - Contact Us - [Ask A Question](https://www.theservicedesk.net/custom-quote) © 2026 All rights reserved. Developed by [GiantFocal](https://www.giantfocal.com) ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Robert Leal", "url" : "https://www.theservicedesk.net/cybersecurity-for-large-and-small-businesses/author/robert-leal" }, "dateModified" : "2026-01-02T16:59:34.400Z", "datePublished" : "2026-01-02T16:59:34.000Z", "headline" : "We Audited 50 Small Business Networks This Year. 90% Had This One “Convenience” Setting Enabled.", "image" : [ "https://www.theservicedesk.net/hubfs/Portrait%20young%20shocked%20business%20woman%20sitting%20in%20front%20of%20laptop%20computer%20looking%20at%20screen%20isolated%20grey%20wall%20background.%20Funny%20face%20expression%20emotion%20feelings%20problem%20perception%20reaction.jpeg" ], "mainEntityOfPage" : { "@id" : "https://www.theservicedesk.net/cybersecurity-for-large-and-small-businesses/we-audited-50-small-business-networks-this-year.-90-had-this-one-convenience-setting-enabled", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://www.theservicedesk.net/hubfs/The%20Service%20Desk%20Logo%20FINAL%20(1).png" }, "name" : "the Service Desk" } } ```