Data Exposure

API Key Exposure Check

Learn how to detect exposed API keys, tokens, or secrets in your HTML code, and how to protect them effectively with secure development best practices.

What this test checks

This test checks whether API keys, tokens, or secrets are publicly exposed in your site's HTML code. API keys grant access to third‑party services (payment, databases, messaging, etc.). Their exposure can lead to abuse, data theft, or fraud.

Our recommendation

Ensure that no API key or secret is present in your source code. Use environment variables to store this information (e.g., .env file in Laravel). Regularly review your configuration files and logs to detect any leaks. Use tools like GitGuardian to monitor your code.

Security tests

View all tests

CMS Security

API Key Exposure Check

What this test checks

Our recommendation

Read more

Drupal Admin Access Check

Drupal settings.php File Access Check

PHP Error Display on Joomla Check

Shopify Upload Folder Security Check

Shopify Cart Endpoint Exposure Check

admin-ajax.php Accessibility Check

Joomla REST API Access Check

Drupal Admin Login Page Protection Check

Referrer-Policy Header Check

CAPTCHA Presence on Registration Page Check

Cookie Security Check

Drupal Admin Access Restriction Check

Configuration File Exposure Check

wp-config.php File Access Check

Shopify Error Display Check

Shopify phpinfo Exposure Check

PHP Error Display on Magento Check

Shopify HSTS Header Check

Authentication File Exposure Check (.htpasswd, .user.ini)

Installation Log File Exposure Check

CORS Configuration Check (Access-Control-Allow-Origin)

SSL Certificate Check

Joomla Admin Login Page Protection Check

WordPress Backup File Exposure Check

PrestaShop Upload Folder Indexing Check

robots.txt File Check

Cross-Origin-Embedder-Policy Header Check

Shopify HTTPS Redirect Check

Magento Session Cookie Security Check

Cross-Origin-Resource-Policy Header Check

WordPress Upload Folder Indexing Check (wp-content/uploads/)

Magento Backup File Exposure Check

WordPress Theme Editor Access Check

Shopify Admin CAPTCHA Protection Check

Cache Policy Check (Cache-Control, Pragma, Expires)

Shopify Storefront API Exposure Check

X-Frame-Options Header Check

Shopify REST API Exposure Check

Joomla Temporary Folder (/tmp/) Access Check

CNIL Mention in Privacy Policy Check

Privacy Policy Page Presence Check

Magento Admin Login Page Protection Check

PHP Error Display in Production Check

Drupal Backup File Exposure Check

Shopify Admin Access Restriction Check

Shopify Environment Information Exposure Check

PrestaShop parameters.php File Access Check

Cross-Origin-Opener-Policy Header Check

CAPTCHA Presence on Client Login Page Check

Content-Security-Policy Header Check

Shopify Client Login CAPTCHA Protection Check

PrestaShop Version Check

Magento Cache Folder Access Check

Shopify Sensitive File Exposure Check

Drupal Upload Folder Indexing Check (sites/default/files/)

Shopify XSS Protection Check

Shopify Password Protection Check

Drupal Version Check

CAPTCHA Presence on Public Forms Check

Shopify X-Content-Type-Options Header Check

SQL Query Exposure Check

Shopify Terms and Conditions (T&C) Presence Check

Index File Presence in Upload Folders Check

Cookie Consent Banner Presence Check

Joomla Upload Folder Indexing Check (images/)

Joomla Log File Exposure Check

CMS Vulnerability Check

PrestaShop Backup File Exposure Check

Shopify Backup File Exposure Check

WordPress REST API Access Check

Magento env.php File Access Check

Known CVE Vulnerability Check on Used Technologies

Joomla Administrator Interface Access Check

Drupal Log File Exposure Check

Joomla Admin Access Check

Plaintext Password Exposure Check