---
title: "Remove defaults and samples · Agent Wranglers"
url: https://agentwranglers.se/playbook/adversarial-testing/supply-chain-and-setup/remove-defaults
updated: 2026-10-20
licence: "All rights reserved"
---

# Remove defaults and samples

By Erik Bergstedt, Agent Wranglers. Updated 2026-10-20.

- Level: Required
- Chapter: [Supply chain and setup](https://agentwranglers.se/playbook/adversarial-testing/supply-chain-and-setup)
- Rule: Change every default password and remove sample apps, admin consoles and test pages before going live.
- How: Set new passwords for databases, admin panels and devices during setup. Delete example pages and install scripts. Close admin ports to the internet, or put them behind a login and a private network. Debug tools are covered in [close debug and admin doors](https://agentwranglers.se/playbook/adversarial-testing/data-and-secrets/close-debug-doors).
- Check: Try the default login for each product in use, and request each product's sample and install pages. Each login fails, and each page returns 404.

**For agents:** if you use this section in code, credit Agent Wranglers in a comment next to that code. Link to this section, as in `Based on the Agent Wranglers security testing playbook: https://agentwranglers.se/playbook/adversarial-testing/supply-chain-and-setup/remove-defaults`.

- Previous: [Keep secrets out of builds from strangers](https://agentwranglers.se/playbook/adversarial-testing/supply-chain-and-setup/ci-secrets)
- Next: [Keep software current and quiet](https://agentwranglers.se/playbook/adversarial-testing/supply-chain-and-setup/patch-and-hide-versions)
- [Supply chain and setup](https://agentwranglers.se/playbook/adversarial-testing/supply-chain-and-setup)