2,508 Internet-Reachable Gerrit Code Review Servers Found

A ZoomEye query for title="Gerrit" returned 2,508 internet-reachable Gerrit Code Review servers (2,165 for the narrower title="Gerrit Code Review"), queried on 28 September 2026. The author notes such servers hold credentials for repositories, CI and databases, so permissive authentication can lead to source code modification.

• title="Gerrit" returned 2,508 matches; title="Gerrit Code Review" returned 2,165
• Gerrit stores credentials for the repo, CI, review database and identity provider
• Main risk is permissive authentication and a guessable admin password
• Recommended checks: anonymous read, integrations and network reachability