Form Security

CAPTCHA Presence on Admin Page Check

The administration interface is a prime target for attackers. Check that a CAPTCHA protects access to this sensitive area and reinforces the security of your admin accounts.

What this test checks

This test checks for the presence of a CAPTCHA on your site's administration interface (usually /admin, /administrator, /wp-admin). The admin area is a prime target for brute‑force attacks. A CAPTCHA adds an extra barrier against automated access attempts.

Our recommendation

Protect admin access with a CAPTCHA. Also enable complementary measures such as login attempt limiting, two‑factor authentication (2FA), and blocking suspicious IP addresses. Use a Web Application Firewall (WAF) and regularly review admin access logs.

Security tests

View all tests

Sensitive Files

CAPTCHA Presence on Admin Page Check

What this test checks

Our recommendation

Read more

Joomla Log File Exposure Check

CMS Vulnerability Check

Shopify HSTS Header Check

Shopify Referrer-Policy Header Check

CAPTCHA Presence on Public Forms Check

Shopify Sensitive File Exposure Check

Cookie Policy Page Presence Check

Magento Configuration File Exposure Check

Cookie Consent Banner Presence Check

PHP Error Display in Production Check

Drupal Temporary Folder (tmp/) Access Check

Shopify Terms and Conditions (T&C) Presence Check

Magento Admin Login Page Protection Check

Shopify File Upload Security Check

Referrer-Policy Header Check

X-Content-Type-Options: nosniff Header Check

Access to wp-cron.php Check

Drupal Log File Exposure Check

Shopify Backup File Exposure Check

WordPress Version Check

WordPress Debug Log Exposure Check

Shopify Error Display Check

PHP Error Display on Drupal Check

Development File Exposure Check

WordPress Uploads Folder Protection Check (.htaccess, index.html files)

Content-Security-Policy Header Check

Privacy Policy Page Presence Check

Configuration File Exposure Check

Shopify API Key Exposure Check

CAPTCHA Presence on Registration Page Check

Upload Folder Protection Check (.htaccess, index.html files)

Known CVE Vulnerability Check on Used Technologies

Shopify phpinfo Exposure Check

Shopify Password Protection Check

WordPress Backup File Exposure Check

Shopify HTTP Security Headers Check

Shopify Upload Folder Security Check

Cross-Origin-Embedder-Policy Header Check

Joomla Admin Access Check

WordPress Theme Editor Access Check

wp-config.php File Access Check

CAPTCHA Presence on Password Reset Form Check

Shopify Permissions-Policy Header Check

PHP Error Display on PrestaShop Check

Shopify Storefront API Exposure Check

Shopify Admin Access Restriction Check

Cross-Origin-Opener-Policy Header Check

PrestaShop parameters.php File Access Check

Shopify Cart Endpoint Exposure Check

Malicious File Presence Check in Upload Folders

Directory Indexing Check

Magento Cache Folder Access Check

SSL Certificate Check

PrestaShop Version Check

PHP Error Display on Joomla Check

Joomla Administrator Interface Access Check

Drupal Admin Access Restriction Check

PrestaShop Upload Folder Indexing Check

CAPTCHA Presence on Contact Form Check

Shopify Contact Form CAPTCHA Protection Check

Drupal Upload Folder Indexing Check (sites/default/files/)

Magento env.php File Access Check

SQL Query Exposure Check

Drupal Admin Login Page Protection Check

PrestaShop Admin Login Page Protection Check

HSTS Header Check (HTTP Strict Transport Security)

Joomla Temporary Folder (/tmp/) Access Check

Shopify Password Reset CAPTCHA Protection Check

WordPress Login Page Access Check (wp-login.php)

API Key Exposure Check

Shopify XSS Protection Check

Information Leak via HTTP Headers Check

Magento Git File Exposure Check

PrestaShop Session Cookie Security Check

Joomla configuration.php Exposure Check

Shopify CSRF Protection Check