{
  "port": 1093,
  "protocol": "tcp",
  "service": "PROOF (proofd / xproofd)",
  "oneLiner": "PROOF, the Parallel ROOT Facility — a physics analysis cluster accepting remote compute sessions.",
  "whatItIs": "PROOF lets a CERN ROOT user run an analysis across a cluster of worker nodes, and 1093 is its registered port: first for the standalone proofd daemon, and later for xproofd, the XRootD-based replacement that froze proofd's development. It turns up on high-energy-physics and other scientific analysis clusters, usually next to XRootD on 1094. A connection here asks the far side to spawn worker processes and run user code.",
  "exposure": {
    "verdict": "never",
    "note": "The service exists to execute code submitted by remote users. Restrict it to the cluster's own network and trusted submit hosts, with authentication configured — never expose it to the internet."
  },
  "checkCommand": "nc -vz -w 3 TARGET 1093",
  "links": [
    {
      "title": "IANA port registry — 1093 (proofd)",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml?search=1093",
      "kind": "iana"
    },
    {
      "title": "proofd(1) manual page — PROOF, The Parallel ROOT Facility",
      "url": "https://manpages.ubuntu.com/manpages/xenial/man1/proofd.1.html",
      "kind": "official-docs"
    },
    {
      "title": "root-project/root — the CERN ROOT framework",
      "url": "https://github.com/root-project/root",
      "kind": "github"
    }
  ]
}