ZoomEye finds 12,444 publicly reachable OpenProject pages

A ZoomEye count-only scan on October 30, 2026 returned 11,686 matches for app="OpenProject" and 12,444 for title="OpenProject". The research stresses that reachability is not a breach but requires reviewing login policy, roles and public projects.

• ZoomEye returned 11,686 matches for app="OpenProject" and 12,444 for title
• The scan ran on October 30, 2026, in about four seconds
• Exposure depends on self-registration, SSO and public projects
• Reviewers should check roles, API access and backups