diff --git a/doc/ports.md b/doc/ports.md
index c938a583fe462f53af98a35d167775ecd536fff4..89c93d3d9f6219b104f64f7cc72d4eee648defaa 100644
--- a/doc/ports.md
+++ b/doc/ports.md
@@ -10,7 +10,7 @@ The list of TCP ports used in SOCtools, as available from the outside:
 |  6443 | MISP |
 |  8888 | haproxy-stats (login: `haproxy`, password is in `secrets/passwords/haproxy`)
 |  9000 | TheHive |
-|  ??   | Cortex |
+|  9001   | Cortex |
 |  9443 | NiFi web GUI |
 | 12443 | Keycloak |