# Restrict public projects

Rationale: When you choose public visibility, anyone on the internet can view your project.

Source: https://maester.dev/docs/tests/AZDO.1003

<!-- This file is generated by website/scripts/generate-test-docs.mjs. Do not edit manually. -->

<div class="test-byline"><div class="test-byline-avatars"><a class="test-byline-avatar test-byline-avatar--author" href="/contributors/sebastianclaesson" title="Sebastian Claesson · Original author"><img src="https://github.com/SebastianClaesson.png" alt="Sebastian Claesson" width="28" height="28" loading="lazy" decoding="async" /></a></div><div class="test-byline-meta"><span class="test-byline-text">Contributed by <a href="/contributors/sebastianclaesson">Sebastian Claesson</a></span><a class="test-byline-link" href="/contributors">All contributors →</a></div></div>

<p class="test-part">Part of <a href="/docs/tests/maester">Maester</a> · Azure DevOps · Security policies · <a href="/docs/tests">All checks</a></p>

```powershell title="Run this check"
Invoke-Maester -TestId AZDO.1003
```

## Overview

Public projects **should be** disabled.

Rationale: When you choose public visibility, anyone on the internet can view your project. With private visibility, only users you give access to can view your project.

#### Remediation action

Disable the policy to stop these requests and notifications.

1. Sign in to your organization.
2. Choose Organization settings.
3. Select Policies under the Security section
4. Locate the "Allow public projects" policy and toggle it to off.

**Results:**
External users are not able to access your project.

#### Related links

* [Learn - Public projects](https://aka.ms/vsts-anon-access)
* [Learn - Change project to public or private](https://learn.microsoft.com/azure/devops/organizations/projects/make-project-public?view=azure-devops)

## Details

<details>
<summary>Every attribute of this check</summary>

| Field | Value |
| --- | --- |
| Test ID | AZDO.1003 |
| Severity | High |
| Suite | Maester |
| Product | Azure DevOps |
| Feature | Security policies |
| Area | External access and sharing |
| Resource type | Tenant |
| User impact | Low |
| Implementation cost | Low |
| MITRE ATT&CK | T1213.003 Code Repositories, T1593.003 Code Repositories |
| Supports controls | nist-800-53-r5:AC-22, nist-800-53-r5:AC-3 |
| PowerShell test | [Test-MtCheckAZDO1003](https://github.com/maester365/maester/blob/main/tests/maester/azure-devops/Test.AZDO.1003.ps1) |
| Services | AzureDevOps |
| Learn more | [https://aka.ms/vsts-anon-access](https://aka.ms/vsts-anon-access) |

</details>

## Source

- Test: [`tests/maester/azure-devops/Test.AZDO.1003.ps1`](https://github.com/maester365/maester/blob/main/tests/maester/azure-devops/Test.AZDO.1003.ps1)
- Documentation: [`tests/maester/azure-devops/Test.AZDO.1003.md`](https://github.com/maester365/maester/blob/main/tests/maester/azure-devops/Test.AZDO.1003.md)